In an effort to clarify things a bit more (due to the rather confusing Bubble terminology)…
Between the parameters on the API calls tab and the keys on the Shared tab, there are actually 4 labels (types) that reference visibility: Public, Hidden, Secret, and Private.
As best I can tell, Hidden simply means that it’s not exposed to the Bubble developer via the UI, but it’s still discoverable client-side (as @lottemint.md’s video depicts). IOW, it’s needed only by the plugin developer, so simply don’t bother the Bubble dev about it (but it’s not sensitive).
Secret and Private both seem to mean the same thing - i.e. that the value is not discoverable client-side (is kept on the server) and is therefore suitable for information that should be kept secure.
| UI Location | Type | Secure |
|---|---|---|
| API calls Tab (parameters) | Public | No |
| API calls Tab (parameters) | Hidden | No |
| API calls Tab (parameters) | Secret | Yes |
| Shared Tab (keys) | Public | No |
| Shared Tab (keys) | Private | Yes |
If anyone knows any different, please let me know.
-Steve