Best practices

Never share your API key.

Store it in an environment variable.

Start by testing with a simple request.

Use a reasonable max_tokens value.