When did you last check who is actually calling your API?

Here is a question worth being uncomfortable about: if one of your API keys leaked right now, how...