Mintplex-Labs/anything-llm
1
0
Fork 0
mirror of https://github.com/Mintplex-Labs/anything-llm.git synced 2026-07-18 19:34:33 -04:00
Code Issues 328 Packages Projects Releases 10 Wiki Activity

[GH-ISSUE #1512] [FEAT]: Lock down embedded chat with API Key. Want to be able to revoke API key from individual services that consume embeds. #971

New Issue
Closed
opened 2026-02-22 18:22:28 -05:00 by yindo · 4 comments
yindo commented 2026-02-22 18:22:28 -05:00
Owner
Copy Link
Copy Source

Originally created by @atljoseph on GitHub (May 23, 2024).
Original GitHub issue: https://github.com/Mintplex-Labs/anything-llm/issues/1512

What would you like to see?

There a way to Lock this feature down with an API Key? Will be calling this from a service in the same cluster, but would be nice to be able to cut it off by revoking API Key (if needed) on a per-service basis. Seeing API Keys for interacting with the main API, but not with the embedded chat feature, and it seems like the API Keys for the embedded feature would need a different scope of permission than those under "API Keys" in setting.

This is the only thing preventing us from promoting the feature into PROD right now, and really don't know enough about k8s ops to delegate this to k8s service/user permissions, let alone manage those. :)

Thank you!

Originally created by @atljoseph on GitHub (May 23, 2024). Original GitHub issue: https://github.com/Mintplex-Labs/anything-llm/issues/1512 ### What would you like to see? There a way to Lock this feature down with an API Key? Will be calling this from a service in the same cluster, but would be nice to be able to cut it off by revoking API Key (if needed) on a per-service basis. Seeing API Keys for interacting with the main API, but not with the embedded chat feature, and it seems like the API Keys for the embedded feature would need a different scope of permission than those under "API Keys" in setting. This is the only thing preventing us from promoting the feature into PROD right now, and really don't know enough about k8s ops to delegate this to k8s service/user permissions, let alone manage those. :) Thank you!
yindo added the enhancementfeature request labels 2026-02-22 18:22:28 -05:00
yindo closed this issue 2026-02-22 18:22:28 -05:00
yindo commented 2026-02-22 18:22:28 -05:00
Author
Owner
Copy Link
Copy Source

@timothycarambat commented on GitHub (May 23, 2024):

In the embed chat config you want to revoke you can disable it on screen. Which is the same as "revoking" its key. No chat will succeed and the embed will not function
Screenshot 2024-05-23 at 8 24 23 AM

@timothycarambat commented on GitHub (May 23, 2024): In the embed chat config you want to revoke you can disable it on screen. Which is the same as "revoking" its key. No chat will succeed and the embed will not function <img width="1407" alt="Screenshot 2024-05-23 at 8 24 23 AM" src="https://github.com/Mintplex-Labs/anything-llm/assets/16845892/79033fc0-cfbe-4b86-9020-cdb5d5d7ff31">
yindo commented 2026-02-22 18:22:28 -05:00
Author
Owner
Copy Link
Copy Source

@atljoseph commented on GitHub (May 23, 2024):

Oh, i guess that does the same thing. Just multiple embeds. Maybe doable that way.

@atljoseph commented on GitHub (May 23, 2024): Oh, i guess that does the same thing. Just multiple embeds. Maybe doable that way.
yindo commented 2026-02-22 18:22:29 -05:00
Author
Owner
Copy Link
Copy Source

@atljoseph commented on GitHub (May 23, 2024):

One more thing. We are planning to have the chatbot be able to give the user a clickable link that would open up a support ticket, and which might be able to forward along a summary of the conversation thus far as a url query parameter. Is there a way to inject some data into the chat, like their email, so the bot could also add that to the link?

@atljoseph commented on GitHub (May 23, 2024): One more thing. We are planning to have the chatbot be able to give the user a clickable link that would open up a support ticket, and which might be able to forward along a summary of the conversation thus far as a url query parameter. Is there a way to inject some data into the chat, like their email, so the bot could also add that to the link?
yindo commented 2026-02-22 18:22:29 -05:00
Author
Owner
Copy Link
Copy Source

@timothycarambat commented on GitHub (May 23, 2024):

The chat can render markdown so if you instruct the system prompt of the workspace to inject that, it should. Obviously you are depending on an LLM to follow instructions to your milage may vary

@timothycarambat commented on GitHub (May 23, 2024): The chat can render `markdown` so if you instruct the system prompt of the workspace to inject that, it should. Obviously you are depending on an LLM to follow instructions to your milage may vary
yindo changed title from [FEAT]: Lock down embedded chat with API Key. Want to be able to revoke API key from individual services that consume embeds. to [GH-ISSUE #1512] [FEAT]: Lock down embedded chat with API Key. Want to be able to revoke API key from individual services that consume embeds. 2026-06-05 14:38:14 -04:00
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
Desktop
Docker
Integration Request
Integration Request
OS: Linux
OS: Mobile
OS: Windows
UI/UX
blocked
bug
bug
core-team-only
documentation
duplicate
embed-widget
enhancement
feature request
github_actions
good first issue
investigating
needs info / can't replicate
possible bug
pull-request
Mirrored from GitHub Pull Request
 question
stage: specifications
wontfix
No Label enhancement feature request
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
yindo
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: Mintplex-Labs/anything-llm#971
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?