Security
Keep Reloop API keys safe.
Store
| Do | Don’t |
|---|---|
RELOOP_API_KEY in env / secrets | Commit keys to git |
| One key per app | Share one key everywhere |
Clear names (Production, CI) | Leave keys unnamed |
If a key leaks
- Disable it (dashboard or code) — access stops now
- Rotate or create a replacement
- Update apps with the new secret
- Delete the old key when nothing uses it
Same steps work in dashboard or code.
Remember
- Secret is shown once (create / rotate)
- Later you only see a prefix in the list
- Reloop stores a hash, not the full key
Was this page helpful?