Site keys
Issuing, scoping, revoking — and the rules public site keys live under.
Updated
On this page
Issuing
Keys are issued from the platform dashboard, on the website's keys panel. The value is shown once; storage is hash + encrypted copy, the same contract as platform keys. Format:
dfd-site-secret-key-live-<random> server-side only, full site surface
dfd-site-public-key-live-<random> browser-safe; read-only + submits; origin-locked
dfd-site-secret-key-test-<random> local development (skips the origin allowlist)