‹ Academy

How to share a Grok Bot without leaking secrets

Aug 30, 2026 · Free to read

Before sharing a Grok Bot, remove anything you would not publish in a public document. The official xAI sharing guide says a public link can expose the Bot's shared identity, description, skills, and routines, and explicitly warns creators to remove API keys, internal URLs, and customer data.

Prepare a public-safe copy

  • Duplicate the working Bot and remove private instructions that are not required by adopters.
  • Replace customer names, internal domains, account IDs, and private examples with neutral placeholders.
  • Remove API keys, passwords, tokens, private repository URLs, and confidential file references.
  • State which connectors or signed-in services an adopter will need to configure themselves.
  • Put sending, publishing, purchasing, deletion, and production changes behind a clear human approval step.

Test the same link an adopter will receive

Open the public preview without relying on your creator session. Confirm the title, description, skills, routines, and avatar are the intended public configuration. Then add a fresh copy and run a small task using non-sensitive data so the setup instructions can be checked independently.

The xAI security documentation says sharing a Bot is not a security boundary. A copied configuration does not transfer the creator's computer or logins, but secrets embedded in the shared configuration can still be exposed.

List only claims you can prove

On bot.store, use the official `x.ai/bot` share URL and describe the job in observable terms. Separate creator ownership, public-link availability, independent testing, buyer reviews, and commercial licensing rather than collapsing them into one “verified” badge.

Trust rule. A live link proves that a preview exists. It does not prove creator authorization, safety, performance, support, or the right to resell the configuration.

Keep the listing current

Recheck the public link after changing the Bot, record the last verified date, and update any access or approval notes. If the configuration is no longer supported, mark it clearly instead of leaving a stale listing to rank.

When the public version is ready, list your Grok Bot and link back to the original x.ai preview.

The recipe

Get the bots this setup runs on.

X BriefAn example of a public Bot listing with an official share destination.Get