Dossier
API tokens
Coverage of API tokens in the Nexus archive.
- Toxic Combinations: When Cross-App Permissions Stack into Risk
On January 31, 2026, researchers found Moltbook, an AI agent social network, had left its database exposed, leaking 35,000 email addresses and 1.5 million agent API tokens. Private messages also contained plaintext third-party credentials, including OpenAI API keys shared between agents.