API keys
Keys live in workspace settings under API. Create named keys per environment so a leak is a rotation, not an incident.
Key types
Every key pair has a publishable key for the browser — this is the data-pk value in your tracking script — and a secret key for server-to-server calls.
The secret shows only once
Copy it at creation time into your secrets manager. Trell never shows it again — if you lose it, delete the key and create a new one.
Managing keys
List all active keys with their names and creation dates, and delete any key to revoke it immediately. If a secret is ever exposed, rotate it from the same screen and update your server configuration.