jcrypt-api-keys

[prime haven]

Depends on what you're doing. Most things require the secret key

[dreamy frigate]

Ok...doing checkout session and webhooks, just trying to be sure its secure

[uncut onyx]

👋 stepping in here.

All server-side actions must use your secret key

So creating Checkout Sessions and handling Webhooks requires your secret key, yes.