mbn_test_ or mbn_live_. The full secret is revealed once and is never stored in recoverable form.
Production checklist
- Create one key per service and environment.
- Grant only the required permissions.
- Restrict models and endpoints when useful.
- Store the key in a server-side secret manager.
- Set an expiry for temporary access.
- Rotate before revoking an active key.