Since the backend workflow is run server side, only the response is available frontend.
The API key param is private so wouldn’t be displayed, though obviously worth checking for yourself. See here:
Private params are stored server side and appended to calls as opposed to being rendered client side: