If you are using your own OpenAI API key with Speech Central, it is recommended to apply basic security restrictions to reduce the risk of misuse.
While Speech Central will work with a full-access API key, limiting permissions helps protect your account in case the key is exposed.
Recommended API Key Configuration
Create a Restricted API key in your OpenAI dashboard and configure endpoint access as follows:
-
Endpoint:
/v1/audio/speech
Permission: Write
The Write permission is required because Speech Central sends POST requests to this endpoint to generate audio from text.
Disable Unused Endpoints
Speech Central does not require access to any other OpenAI API endpoints. All other endpoints can be safely set to None.
Additional Recommendations
- Create a dedicated OpenAI project for Speech Central
- Set usage limits or budget alerts within that project
- Avoid reusing API keys across multiple applications
These steps follow the principle of least privilege and help minimize potential costs and security risks.