API Keys Management
Your site connects to several third-party services via API keys. Managing these keys securely is essential.
Where API keys are stored
API keys are stored as environment variables in your Vercel project. They are never exposed to the browser or included in client-side code.
Required API keys
- Red Bricks API Token — Powers all pre-construction listing data
- Supabase URL and Anon Key — Database and authentication
- Google Maps API Key — Interactive map and geocoding
Optional API keys
- Resend API Key — Email sending via Resend
- Gemini API Key — AI-powered project highlights generation
- Repliers API Key — MLS/IDX data (if MLS is enabled)
- Telnyx API Key — SMS messaging
- Zoom API credentials — Virtual meeting links
Updating an API key
- Log in to your Vercel dashboard
- Go to Project > Settings > Environment Variables
- Find the key you need to update
- Click Edit, enter the new value, and save
- Redeploy your site for the change to take effect
Never share API keys in email, chat, or public repositories. If a key is compromised, rotate it immediately by generating a new key from the service provider and updating it in Vercel.
Testing API keys
After updating a key, verify it works by:
- Checking that listings load on the homepage (Red Bricks API)
- Verifying the map renders (Google Maps)
- Sending a test email (Resend)
- Checking MLS data sync logs (Repliers)
Was this article helpful?
Related Articles
Enabling MLS on Your Site
How to activate the MLS/IDX feature toggle and connect resale data.
MLS/IDX Integration
MLS Data Sync and Freshness
How the cron sync works and how often MLS data is updated.
MLS/IDX Integration
Setting Up Email
How to configure SES or SMTP for sending emails from your platform.
Communication