OpenAI Platform

Create one encrypted OpenAI API key for the connected Platform account. Only call this from a trusted setup flow after generating a 4096-bit RSA public JWK locally, such as the API key setup widget or Codex key setup skill. The raw API key is never returned in tool output. Omit expires_in_seconds for a non-expiring key, subject to Platform policy. Creation does not depend on expiration-policy discovery.

Read the selected project's API key expiration policy for the setup widget. A null effective_max_expiry_seconds means the policy is unavailable; zero means unbounded. Policy lookup is not required for key creation. This may initialize Platform creation targets for the connected account.

Load the OpenAI organizations and projects available as targets for an API key setup widget. The connector-owned widget calls this directly. This may initialize Platform creation targets for the connected account.

Open the ChatGPT web/widget OpenAI API key setup flow. Use this only in ChatGPT chat surfaces when the user asks for an OpenAI API key, OPENAI_API_KEY, or Platform key, or when code/config in the conversation needs OPENAI_API_KEY. Do not use this tool from Codex. In Codex, follow the installed Codex API key setup skill and use create_encrypted_openai_api_key only from a trusted local-write flow that decrypts locally into a user-confirmed file. Opening this setup flow automatically loads selectable organizations and projects and may initialize creation targets for the connected account. The setup flow creates the key through the connector and lets the user copy or download it without exposing the raw key in chat.