Protect Public API Key

The Public API Key is used to initialize client SDKs and may appear in client code, but it must not be your only security control. Configure origin validation for Web, app-identity and signature validation for iOS and Android, and appropriate rate limits for every integration.

For configuration details, see Applications and Integrations. For quota and rate-limit definitions, see Quotas, Rate Limits, and Data Retention.