Credential access
mediumNoteConfirmed on reviewmedium confidenceThe server reads the AgentRAM API key from the AGENTRAM_API_KEY environment variable and sends it in the x-api-key header to AGENTRAM_API_BASE, which the operator can override by environment variable; by default this is the publisher's own api.agentram.dev, so the key reaches only the service that issued it.
const API_BASE = process.env.AGENTRAM_API_BASE || "https://api.agentram.dev";
vector:code
Reviewer's reasoning
The API key is sent only to AGENTRAM_API_BASE, which defaults to the publisher's own api.agentram.dev and is an operator-controlled environment variable, so the key goes to the issuing service unless the user themselves redirects it. Under the operator-configuration carve-out this is a note, not abuse.