Api Key — Orion
For production deployments, leverage:
These tools encrypt keys at rest and provide audit logs of who accessed the key and when.
This is the golden rule. Avoid:
# NEVER DO THIS
orion_api_key = "or_abc123def456"
Instead, use environment variables (.env files) or configuration files excluded from version control via .gitignore.
Set a recurring calendar reminder to generate new keys and revoke old ones. Automate this process via the Orion API itself if they offer a rotation endpoint. Orion Api Key
As Orion and similar DeFi aggregators evolve, we may see:
These innovations would address current security and usability limitations. For production deployments, leverage:
When you use a third-party AI interface, your data may be used for model training. With the Orion API, requests made via your API key are typically covered under stricter data processing agreements (DPAs), making it suitable for handling sensitive business documents or proprietary code.