FAQ

What is the difference between Public API Key and server key?

Public API Key is used for client SDK and can appear in client code; server key is used for trusted servers to call APIs and must be kept confidential.

What applications will the Region server key affect?

It will affect applications in the same Region that use this key to call the Server API. Please review the affected apps listed on this page before rotating.

How long can the old key be used after rotation?

The old key remains available for recall during a 48-hour grace period, after which it automatically expires. Please update all server configurations as soon as possible.

Will rotating the key of one Region affect other Regions?

No. Server keys are isolated by Region, and other Regions use their own keys.

Can I put the server key into the front-end environment variable?

No. As long as a variable makes its way into a web page, mobile app, or client-side build artifact, it's no longer a secure server-side configuration.

What should I do if the call fails after the IP whitelist is configured?

If the call still cannot be made after completing the basic check, please continue to check the Server API authentication failure.

Check the actual egress IP, NAT and proxy configuration of the service, and confirm that the request uses the key for the correct Region. If it still fails, contact Geelab Support.