API keys & environment
Store secrets safely and expose only publishable values to the client app.
Where to manage keys
Design → App Settings → API keys & environment (Env keys panel).
Encrypted secret vs publishable
| Type | Use for |
|---|---|
| Encrypted secret | Server-only keys (OpenAI, Stripe secret, etc.). Never shipped in downloads or the public client. |
| Publishable / client | Keys meant for the browser (anon keys, public config). Available as window.APPIFY_ENV. |
Golden rule
If leaking the value would be bad, mark it encrypted/secret — not client.