Trust & security

Keep credentials and usage in your control.

Create workspace keys for trusted server-side code. Review activity, revoke keys, and keep provider credentials behind the ngamia gateway.

  • Full API key shown once at creation
  • Use a separate key for each environment
  • Never ship secrets in browser code
Hardware security key beside a laptop in a calm, low-lit workspace
Workspace API keyProduction · Created for your server
ngm_live_••••••••••••REDACTED

The full key appears once when it is created. Store it in a server secret manager.

How it comes together

Make safe key handling part of the integration.

A leaked key can spend workspace credits. Treat it like a server credential from the first commit.

01

Create

Create a separate workspace key for each environment.

02

Store

Use a server secret manager or environment variable.

03

Review

Rotate or revoke keys and inspect workspace activity.

The full API secret is only displayed at creation. Do not place it in browser bundles, mobile apps, or public repositories.