Security

An API key allows an application or integration to authenticate access to the system. For this reason, it should be treated like a password or other credentials.

Important: Do not share the API key with other people, do not send it in email messages or instant messengers, and do not place it in public documents, code repositories, or screenshots.

Keys should be stored in a secure location intended for managing secrets or credentials. For different integrations, it is worth creating separate keys and giving them clear names. This makes it easier to later disable access for a specific integration without affecting the other connections.

If there is a suspicion that the key has been disclosed to an unauthorized person, it should be immediately deactivated or deleted and a new one created.