Datasette

2 items

Two screenshots side by side: on the left an agent session where one command was run and four addresses on port 8010 were printed back, and on the right the LLM keys page listing four stored key names above a form for setting a key.

Connectors

Willison's new plugin takes an API key through a web form, not through the agent

Simon Willison released llm-keys-ui 0.1 on September 20, 2026. The plugin serves a small page from the machine where LLM is installed, and a key typed into that page is saved straight into the key store. Nothing has to be pasted into the coding agent running on the same machine. The interface has no authentication, and the project tells the operator to stop the server once the keys are in.

Simon Willison's WeblogSeptember 21verified

Tools

Datasette ships two security releases found by an audit its authors ran with models

Two patch versions are out, 1.0a39 for the alpha series and 0.65.4 for the stable line, and the fixes matter most for an instance on the public web that mixes public and private tables. The list is a catalog of ways a permission check can be true and still wrong: a table name in the wrong case, a filter that reaches through an intermediate table, statistics tables nobody thought to deny. The audit that found them was run with Claude Fable 5.1, GPT-5.6 and GPT-6 Astra, and reviewed by two people over almost a week.

Simon WillisonSeptember 11verified