API Keys

Motomarks uses API keys to authenticate requests. You can view and manage your keys in the dashboard.

Key Types

Publishable Keys

Publishable keys (starting with pk_) are designed to be used in client-side code (e.g., browsers, mobile apps). They have limited permissions and are primarily used with the Image CDN.

Secret Keys

Secret keys (starting with sk_) are for server-side use only. They have full access to your account's API capabilities and should never be exposed in client-side code or version control. They authenticate the JSON API and headless connections to the MCP server.

Security Best Practices
  • Do not check your secret keys into version control (git).
  • Use environment variables to store your keys.
  • If you suspect a key has been compromised, roll it immediately in the dashboard.
  • Use publishable keys for all frontend implementations.