​
Public API keys

Public API keys can be safely exposed in a browser environment as they don’t grant access to any sensitive data. So for example, if your application runs client-side in a browser, you should use a public API key.

Public API keys can’t be used to access the bridge history of your app as that would leak the entire history to the public.

​
Secret API keys

Secret API keys work just the same as public ones with the difference that they can be used to access the entire bridge history of your app. You should only use secret API keys in code that is not run client side.

Visit the Rhino Developer Portal

You can create a project and manage API keys there.