hi, ive been using you bubble plugin Stripe
The keys were placed correctly—otherwise, it wouldn’t have worked at all. The actual issue is that Stripe flagged the keys for being publicly exposed, meaning the API key field is leaking credentials.
No, it means your app is misconfigured. If you use Bubble’s security scanner, it will show you where it is leaking.