In this section we develop attacks for APIs that return log probabilities for the top \(K\) tokens (sorted by logits), and where the user can specify a real-valued bias \(b\in\mathbb{R}^{|\mathcal{X}|}\) (the "logit bias") to be added to the logits for specified tokens before the softmax, i.e.,