OFAC Screening API Key Management

API key management: store keys in environment variables or secrets managers (not in code), rotate keys periodically, use separate keys for development and production, and restrict key access to authorized systems. A compromised screening key can be used to bypass screening.