No secrets
Variables are readable on the public content API. Never store API keys, passwords, or private credentials in variables.
Where to manage them
Dashboard → website → Data → Variables tab (/websites/:id/data?tab=variables). Editors can also insert variables from the overlay Data rail when allowed.
How values resolve
- Live site hydration (
autoStartMacro) - Editor preview
macro-prerender/ static export
Unresolved tokens remain as {{key}} in HTML until a value exists.
In this group
Naming & locales
Dotted keys and sets.
Manual vs syncedEditable vs locked from sources.
Data sourcesHTTP JSON + JSONPath mappings.
Sync logRuns, errors, capabilities.
Developer usage in HTML: Site variables.