Never give AI agents production write keys — here's why

Keeping your API keys safe and separated from your agents is critical. Store all your prod write keys in a password manager like 1Password, and never hand them directly to an agent. Production writing is dangerous — your agents will do something bad if given unrestricted access. Instead, set up a system where the agent asks you for the key when it needs to write to prod, you go into 1Password, copy and paste it into the session, and you're both very clear about what you're doing. That discipline is what prevents costly, hard-to-reverse mistakes.