repeater llm --set <KEY> saves the key via the OS keyring (com.repeat/openai:default), so macOS Keychain/Windows Credential Manager/libsecret hold it securely.
REPEATER_OPENAI_API_KEY overrides the keyring for temporary runs.
repeater llm --test confirms the key with OpenAI, repeater llm --clear forgets it instantly.