# Databricks says it hides the OpenAI key on purpose

_Databricks lets ChatGPT, Codex and GPT agents run on governed data, with the OpenAI key locked in Unity Gateway._

**Published:** 2026-11-13
**Source:** https://www.startuphub.ai/ai-news/artificial-intelligence/2026/databricks-says-it-hides-the-openai-key-on-purpose

---

[Databricks](https://www.databricks.com/blog/openai-and-databricks-enterprise-ai-your-governed-data) says enterprises can now run ChatGPT on Lakehouse data, run Codex under audit, and ship GPT agents as Databricks Apps. Unity Catalog still decides who sees what. There is no breach here and no patch to apply, since an outsider without a valid Databricks identity gets nothing back.

The install line tells you how it really works: run ug codex.

That command routes Codex through Unity Gateway instead of calling [OpenAI](https://www.startuphub.ai/startups/openai) directly, per Databricks. Developers sign in with a Databricks credential, the OpenAI key stays in the Gateway, and every request is logged with budgets by team. It is plumbing for a problem teams know well: keys scattered across laptops and no record of spend.

Greg Brockman, co-founder and president of OpenAI, put the data gap bluntly: "it's like hiring someone with 20 PhDs and never inviting them to a meeting." [Databricks](https://www.startuphub.ai/startups/databricks) co-founder and CEO Ali Ghodsi answered with context in a joint conversation released earlier this week. The September 2025 multi-year agreement makes OpenAI one of Databricks largest customers, according to Databricks, while every Databricks engineer gets Codex.

For business users the surface is ChatGPT with the Genie plugin, which runs on the Genie MCP. A product manager asks about weekly active users by plan tier. Genie Ontology supplies the approved definition, Databricks runs the query and returns charts with links to sources. Permissions still apply, so you only see data you could already see.

For builders the surface is Databricks Model Serving next to the data, with no external API key to manage. Teams can build in Agent Bricks or ship the OpenAI Agents SDK as an App, with Lakebase holding memory and state. By default Databricks AI assistive features are partner-powered by Azure OpenAI service, OpenAI on Databricks, and [Anthropic](https://www.startuphub.ai/ai-news/ai-figures/2026/figure-andrej-karpathy-anthropic-pretraining-2026-05-31) on Databricks, per [Databricks docs](https://docs.databricks.com/gcp/en/databricks-ai/).

You have felt where this breaks.

If no one curates the Ontology, ChatGPT will cite the wrong definition with full confidence. Databricks lists GPT-6 family models and open-weight gpt-oss models as callable from SQL, notebooks and agents. Curate the definitions and set the Gateway budgets first, or you will pay for fast answers you cannot trust.

---

Original analysis from [startuphub.ai](https://www.startuphub.ai), the #1 AI startup directory.

© StartupHub.ai. All rights reserved. You may not republish this article in full without a license. Search engines and AI research tools may crawl and summarize for reference. Bulk reproduction or model training on this content requires a license. See https://www.startuphub.ai/terms.