What a Anthropic API key looks like

API keys start with sk-ant-api followed by a two-digit version (for example sk-ant-api03-) and a long random string. Admin keys use sk-ant-admin.

A fake example, in the right format:

sk-ant-api03-Fak3D3m0K3yF0rScrubL0gsS4mpl3T3xtOnlyN0tR34l0123456789abcdefghijklmnopqrstuvwxyzABCDEFGHIJKL-AA

ScrubLogs replaces it with <ANTHROPIC_KEY_1>.

Why a leak is dangerous

Anyone with the key can send requests billed to your organisation and use up its rate limits.

If yours leaked: rotate it

Redacting a copy doesn’t un-leak the original. If the real value was shared anywhere, replace it:

1. In the Claude Console, open API keys and disable or delete the leaked key.
2. Create a new key in the right workspace and deploy it.
3. Review usage and set spend limits on the workspace.