Skip to main content
  • Never commit keys to source control: use environment variables or a secret manager
  • Rotate immediately if compromised (Dashboard → API keys)
  • Woo bootstrap keys: connect flow only; runtime uses the dedicated key issued after connect