Key type

Public API Key

Public API Key belongs to a specific endpoint and is used for Web, iOS or Android SDK initialization.

You can put it in the client code, but you should still configure source verification, application signature verification, and request throttling to reduce the risk of abuse by other sources.

Public API Key is not used to call the Server API, nor can it replace the Region server key.

Region server key

The Region server key is used to call the Geelab Server API on the trusted server. It belongs to a Region, and applications under the same Region may share the key.

The server key provides access to server query capabilities and must therefore be kept secret. Don't put it in web pages, mobile SDKs, client configuration files, or public repositories.