Best Practices for Securing Your OpenBullet API URL and API Key?

Rate limiting and IP whitelisting are both great ideas! They won’t stop someone from stealing your openbullet api url api key if it’s leaked, but they’ll def limit the damage. I’d also suggest using HTTPS for all API calls to keep things encrypted.