Create a key
Open Developers while signed in, create a key for one named integration, and copy it when shown. Store it in a server-side secret manager or protected environment variable.
Never ship it to users
- Do not place it in NEXT_PUBLIC variables.
- Do not commit it to Git.
- Do not paste it into support reports or client-side JavaScript.
Revoke and rotate
Revoke an unused or exposed key immediately. Create a replacement for the integration rather than sharing one credential across unrelated systems.