If you suspect exposure, stop issuing new requests with the credential and revoke or disable it if the current product supports that operation. Update server configuration and search repositories, logs, and deployment settings for copies.
Review usage and charges during the affected period. Preserve request IDs and timestamps, then email contact@moduck.ai without disclosing the secret itself.
Any billing adjustment depends on the approved dispute policy; it cannot be promised in advance.