API keys

Keys are generated on the server and shown once. Store them in secrets managers — not in client-side code.