Hiding API Keys with Netlify Functions in Gatsby

[PhatOofxD]

I’m trying to hide an API Secret Key on my Gatsby Site using a Netlify Functions. Are there any good guides to this?

[luke]

Hi, @PhatOofxD. There is such a guide!

[Support Guide] How do I keep my API keys/tokens safe using Netlify Functions?

Last reviewed by Netlify Support on Oct 2023 With Jamstack sites, using API keys/tokens to make API calls to other services is a frequent pattern. In some cases, you may want to hard code the keys in your html, when invoking those API calls - which on a service like Netlify means these keys are now public. Anyone can open their browser dev tools and view them, and of course this can lead to someone abusing this access. In some cases, this is fine. For instance, some types of Firebase and Faun…

If that doesn’t help, please reply here anytime with other questions and we’ll do our best to answer.