How to Remove API Credentials Before Sharing a Workflow

How to Remove API Credentials Before Sharing a Workflow. Search the export for tokens before you upload. Rotate anything that was ever real.

Steps

• Export JSON or ZIP.
• Search for bearer, api_key, secret, password, xoxb, sk-.
• Replace with placeholders in an install guide.
• Rotate production keys if they were in an old copy.

Why it matters

Flow Market rule checks catch some dumps, not all. You own leaked keys.

Last updated 4 November 2026.