API Keys and Panel Tokens Hygiene on GlassHosting
Rules
- Never commit tokens to public git
- Never paste tokens into public Discord
- Create least-privilege keys when the panel allows
- Rotate on staff changes or suspected leak
MAC invalid errors
Application API MAC/token mismatches often mean wrong key, wrong panel URL, or stale secrets—see the existing GlassHosting API troubleshooting articles.
Related links: panel.glasshosting.com · billing.glasshosting.com · glasshosting.com · knowledgebase.