Data Feeds
Bring live data in over an HTTP poll, a WebSocket or a webhook push — JSON, XML or text — and fold it into the store.
Keys that never reach the browser.
Write {{SECRET_NAME}} anywhere in the URL, a header value, the body, a WebSocket subscribe text or a webhook token. The server substitutes the value at request time; the editor only ever holds the placeholder.
GET https://api.example.com/v1/scores?key={{SPORTS_API_KEY}}
Authorization: Bearer {{SPORTS_TOKEN}}
- Secret names match /^[A-Za-z_][A-Za-z0-9_]*$/.
- An unknown name fails the request with “Unknown secret: <name>” rather than sending an empty value.
- Data feeds are forced to the server runtime, so the substituted value never exists in the browser.
- Create the secrets first, in Logic → Secrets.