Treat an API key as a credential An API key can allow software to act on an account or workspace, so it should be handled with the same care as other confidential credentials. In a link management integration, a leaked key could let an unintended person perform operations allowed by https://manuelwtkan.signalwiki.com/2744060/designing_reliable_url_shortener_api_integrations