Store client secrets only on your backend or server environment. Never expose a client secret in frontend JavaScript, public repositories, screenshots, or browser-readable configuration.
powered by amerencio
Back to overview
Support areas
Security
2FA, verification codes, OAuth warnings, domains, secrets, logs and sensitive actions.
Rotate the secret immediately from the API client settings, update your server environment, and review recent API activity for unexpected requests.
Yes. XWMS records API request metadata for audit, debugging, usage tracking, and security review. Sensitive values should not be exposed in logs.
Live support
Start a conversation
You must be logged in to start a support ticket.
Log inWelcome back. Start a ticket or leave your question.
