Developer Console is showing all of my assistants instructions

I am working on one of the assistants I’ve created to resolve user queries and while securing API calls back and fourth I was testing through developer console and found out any logged in user can see all of assistants and instructions I’ve added there.

Is there a way to secure this? I am a no coder and use Bubble for integrating chat bots.

Welcome to the dev forum @amsurewewill
Can you share the URL for this:

Additionally, please describe how the logged in user is able to see system instructions.

I expect the same way that a logged-in user is able to see the API key…by the client making the connections to OpenAI.

Thanks. Looks like it is detecting all of my API’s default instructions, so found few solutions on how to hide default instructions.

I have another question if you can help, when a logged in user is making a post api call then will that user will able to see what instructions are we passing in the api, like data, image, or text files through developer console?

The end-user is not supposed to have access to the whole API, just the functionality that you include in your product.

Thus they should not have access to the developer console in the first place.

I’d highly recommend reading the production best practices.