Security and credential rotation
Make calls from your own trusted server. Keep secrets in environment variables or a secrets manager, not source control. Never log an Authorization header or a credential value.
Rotate safely
- Generate a replacement credential in the application.
- Copy and store it securely; it is shown once.
- Update your server environment.
- Verify the integration with the replacement.
- Revoke the previous credential.
The old credential is not automatically destroyed so a server can migrate without an avoidable outage. Revoke immediately after suspected exposure.
Developer ConsoleCreate applicationUsageCredentials and production access
