pull down to refresh

114 sats \ 8 replies \ @optimism 4 Mar \ on: Dev stunned by $82K Gemini API key bill after theft AI

Limits anyone?

write
preview
238 sats \ 3 replies \ @gmd 4 Mar

weird they won't even give me more than 250 API calls per day on gemini 3.0/3.1...

trying to expand our list of supported stocks beyond ~125 but keep running into API limits...

reply
201 sats \ 2 replies \ @optimism 4 Mar

Hmm I saw this in the am when I was looking at this, and it looks like the tiering is fully dependent on how good a lil kitty you've been.

reply
115 sats \ 1 reply \ @gmd 18h
Total spend: > $250 and at least 30 days since successful payment

They want me to spend more but they won't give me more API calls so I can spend more 😅 Also they gave me $200-300 in free credits to start so I haven't even made a single successful payment lol

reply
15 sats \ 0 replies \ @optimism 14h

I guess it's hard to be a good lil kitty sometimes.

reply
136 sats \ 3 replies \ @0xbitcoiner OP 4 Mar

I'm not sure if I get your question, but I think a customizable spending limit is a basic feature. I don't know if Google has it or if the dev just didn't set it up.

reply
55 sats \ 2 replies \ @optimism 4 Mar

Exactly. I'm quite sure that every Google billing feature supports both budgeting per function/project/org unit and per-key/user overall call quotas. You have to set these up of course.

I think that the main issue here though isn't in user space; it's that Google has too permissive a default policy.

reply
115 sats \ 1 reply \ @0xbitcoiner OP 4 Mar
it's that Google has too permissive a default policy.

It shouldn't be on purpose! ~lol

reply
55 sats \ 0 replies \ @optimism 4 Mar

I just checked and you can see all your active keys google org API keys in https://console.cloud.google.com/apis.

Might be a good idea to remove ones you don't use anymore... and put 2FA on your admin account. And not run fucking clawdbot on something that exposes org admin credentials. ~lol

reply