[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"skill-mapbox-mapbox-token-security":3,"mdc--ss09f9-key":33,"related-org-mapbox-mapbox-token-security":2880,"related-repo-mapbox-mapbox-token-security":3057},{"slug":4,"name":4,"fn":5,"description":6,"org":7,"tags":11,"stars":23,"repoUrl":24,"updatedAt":25,"license":26,"forks":27,"topics":28,"repo":29,"sourceUrl":31,"mdContent":32},"mapbox-token-security","manage Mapbox access token security","Security best practices for Mapbox access tokens, including scope management, URL restrictions, rotation strategies, and protecting sensitive data. Use when creating, managing, or advising on Mapbox token security.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},"mapbox","Mapbox","https:\u002F\u002Fpexgzepcugksgbtrxkhf.supabase.co\u002Fstorage\u002Fv1\u002Fobject\u002Fpublic\u002Forg-logos\u002Fmapbox.png",[12,16,19,20],{"name":13,"slug":14,"type":15},"Security","security","tag",{"name":17,"slug":18,"type":15},"Compliance","compliance",{"name":9,"slug":8,"type":15},{"name":21,"slug":22,"type":15},"Access Control","access-control",69,"https:\u002F\u002Fgithub.com\u002Fmapbox\u002Fmapbox-agent-skills","2026-07-30T05:30:53.749596",null,10,[],{"repoUrl":24,"stars":23,"forks":27,"topics":30,"description":26},[],"https:\u002F\u002Fgithub.com\u002Fmapbox\u002Fmapbox-agent-skills\u002Ftree\u002FHEAD\u002Fskills\u002Fmapbox-token-security","---\nname: mapbox-token-security\ndescription: Security best practices for Mapbox access tokens, including scope management, URL restrictions, rotation strategies, and protecting sensitive data. Use when creating, managing, or advising on Mapbox token security.\n---\n\n# Mapbox Token Security Skill\n\nThis skill provides security expertise for managing Mapbox access tokens safely and effectively.\n\n## Token Types and When to Use Them\n\n### Public Tokens (pk.\\*)\n\n**Characteristics:**\n\n- Can be safely exposed in client-side code\n- Limited to specific public scopes only\n- Can have URL restrictions\n- Cannot access sensitive APIs\n\n**When to use:**\n\n- Client-side web applications\n- Mobile apps\n- Public-facing demos\n- Embedded maps on websites\n\n**Allowed scopes:**\n\n- `styles:tiles` - Display style tiles (raster)\n- `styles:read` - Read style specifications\n- `fonts:read` - Access Mapbox fonts\n- `datasets:read` - Read dataset data\n- `vision:read` - Vision API access\n\n### Secret Tokens (sk.\\*)\n\n**Characteristics:**\n\n- **NEVER expose in client-side code**\n- Full API access with any scopes\n- Server-side use only\n- Can create\u002Fmanage other tokens\n\n**When to use:**\n\n- Server-side applications\n- Backend services\n- CI\u002FCD pipelines\n- Administrative tasks\n- Token management\n\n**Common scopes:**\n\n- `styles:write` - Create\u002Fmodify styles\n- `styles:list` - List all styles\n- `tokens:read` - View token information\n- `tokens:write` - Create\u002Fmodify tokens\n- User feedback management scopes\n\n### Temporary Tokens (tk.\\*)\n\n**Characteristics:**\n\n- Short-lived (max 1 hour)\n- Created by secret tokens\n- Single-purpose use\n- Automatically expire\n\n**When to use:**\n\n- One-time operations\n- Temporary delegated access\n- Short-lived demos\n- Security-conscious workflows\n\n## Scope Management Best Practices\n\n### Principle of Least Privilege\n\n**Always grant the minimum scopes needed:**\n\n❌ **Bad:**\n\n```javascript\n\u002F\u002F Overly permissive - don't do this\n{\n scopes: ['styles:read', 'styles:write', 'styles:list', 'styles:delete', 'tokens:read', 'tokens:write'];\n}\n```\n\n✅ **Good:**\n\n```javascript\n\u002F\u002F Only what's needed for displaying a map\n{\n scopes: ['styles:read', 'fonts:read'];\n}\n\u002F\u002F Add 'styles:tiles' if your map uses raster tile sources\n{\n scopes: ['styles:read', 'fonts:read', 'styles:tiles'];\n}\n```\n\n### Scope Combinations by Use Case\n\n**Public Map Display (client-side):**\n\n```json\n{\n \"scopes\": [\"styles:read\", \"fonts:read\", \"styles:tiles\"],\n \"note\": \"Public token for map display\",\n \"allowedUrls\": [\"https:\u002F\u002Fmyapp.com\u002F*\"]\n}\n```\n\n**Style Management (server-side):**\n\n```json\n{\n \"scopes\": [\"styles:read\", \"styles:write\", \"styles:list\"],\n \"note\": \"Backend style management - SECRET TOKEN\"\n}\n```\n\n**Token Administration (server-side):**\n\n```json\n{\n \"scopes\": [\"tokens:read\", \"tokens:write\"],\n \"note\": \"Token management only - SECRET TOKEN\"\n}\n```\n\n**Read-Only Access:**\n\n```json\n{\n \"scopes\": [\"styles:list\", \"styles:read\", \"tokens:read\"],\n \"note\": \"Auditing\u002Fmonitoring - SECRET TOKEN\"\n}\n```\n\n## URL Restrictions\n\n### Why URL Restrictions Matter\n\nURL restrictions limit where a public token can be used, preventing unauthorized usage if the token is exposed.\n\n### Effective URL Patterns\n\n✅ **Recommended patterns:**\n\n```\nhttps:\u002F\u002Fmyapp.com\u002F* # Production domain\nhttps:\u002F\u002F*.myapp.com\u002F* # All subdomains\nhttps:\u002F\u002Fstaging.myapp.com\u002F* # Staging environment\nhttp:\u002F\u002Flocalhost:* # Local development\n```\n\n❌ **Avoid these:**\n\n```\n* # No restriction (insecure)\nhttp:\u002F\u002F* # Any HTTP site (insecure)\n*.com\u002F* # Too broad\n```\n\n### Multiple Environment Strategy\n\nCreate separate tokens for each environment:\n\n```javascript\n\u002F\u002F Production\n{\n note: \"Production - myapp.com\",\n scopes: [\"styles:read\", \"fonts:read\"],\n allowedUrls: [\"https:\u002F\u002Fmyapp.com\u002F*\", \"https:\u002F\u002Fwww.myapp.com\u002F*\"]\n}\n\n\u002F\u002F Staging\n{\n note: \"Staging - staging.myapp.com\",\n scopes: [\"styles:read\", \"fonts:read\"],\n allowedUrls: [\"https:\u002F\u002Fstaging.myapp.com\u002F*\"]\n}\n\n\u002F\u002F Development\n{\n note: \"Development - localhost\",\n scopes: [\"styles:read\", \"fonts:read\"],\n allowedUrls: [\"http:\u002F\u002Flocalhost:*\", \"http:\u002F\u002F127.0.0.1:*\"]\n}\n```\n\n## Token Storage and Handling\n\n### Server-Side (Secret Tokens)\n\n✅ **DO:**\n\n- Store in environment variables\n- Use secret management services (AWS Secrets Manager, HashiCorp Vault)\n- Encrypt at rest\n- Limit access via IAM policies\n- Log token usage\n\n❌ **DON'T:**\n\n- Hardcode in source code\n- Commit to version control\n- Store in plaintext configuration files\n- Share via email or Slack\n- Reuse across multiple services\n\n**Example: Secure Environment Variable:**\n\n```bash\n# .env (NEVER commit this file)\nMAPBOX_SECRET_TOKEN=sk.ey...\n\n# .gitignore (ALWAYS include .env)\n.env\n.env.local\n.env.*.local\n```\n\n### Client-Side (Public Tokens)\n\n✅ **DO:**\n\n- Use public tokens only\n- Apply URL restrictions\n- Use different tokens per app\n- Rotate periodically\n- Monitor usage\n\n❌ **DON'T:**\n\n- Expose secret tokens\n- Use tokens without URL restrictions\n- Share tokens between unrelated apps\n- Use tokens with excessive scopes\n\n**Example: Safe Client Usage (Vite):**\n\n> **Note:** This example uses **Vite**. For Next.js, CRA, Angular, or a plain `window.MAPBOX_ACCESS_TOKEN` \u002F CDN setup, see [Token Management](references\u002Ftoken-management.md). Do not chain `import.meta.env` and `process.env` in one expression — the unused path throws `ReferenceError` in the browser.\n\n```javascript\n\u002F\u002F Public token with URL restrictions - SAFE (Vite)\nconst mapboxToken = import.meta.env.VITE_MAPBOX_ACCESS_TOKEN;\n\n\u002F\u002F Guard BEFORE constructing the map — missing tokens otherwise yield a silent blank map\nif (!mapboxToken || mapboxToken === 'YOUR_MAPBOX_ACCESS_TOKEN') {\n throw new Error('Missing VITE_MAPBOX_ACCESS_TOKEN — set it in env before creating the map');\n}\n\nmapboxgl.accessToken = mapboxToken;\n```\n\n### Agent anti-pattern: skip the token guard\n\nAgents often assign `mapboxgl.accessToken` and call `new mapboxgl.Map(...)` with no check. That fails closed as a blank canvas with no UI error.\n\n**Always:**\n\n1. Resolve the token from the env pattern for your bundler (never hardcode a real `pk.` in source)\n2. Validate it is present and not a placeholder\n3. Only then set `accessToken` and construct the map\n\n## Security Checklist\n\n**Token Creation:**\n\n- [ ] Use public tokens for client-side, secret for server-side\n- [ ] Apply principle of least privilege for scopes\n- [ ] Add URL restrictions to public tokens\n- [ ] Use descriptive names\u002Fnotes for token identification\n- [ ] Document intended use and environment\n\n**Token Management:**\n\n- [ ] Store secret tokens in environment variables or secret managers\n- [ ] Never commit tokens to version control\n- [ ] Rotate tokens every 90 days (or per policy)\n- [ ] Remove unused tokens promptly\n- [ ] Separate tokens by environment (dev\u002Fstaging\u002Fprod)\n- [ ] Guard missing tokens in client code before `new mapboxgl.Map`\n\n**Monitoring:**\n\n- [ ] Track token usage patterns\n- [ ] Set up alerts for unusual activity\n- [ ] Regular security audits (monthly)\n- [ ] Review team access quarterly\n- [ ] Scan repositories for exposed tokens\n\n**Incident Response:**\n\n- [ ] Documented revocation procedure\n- [ ] Emergency contact list\n- [ ] Rotation process documented\n- [ ] Post-incident review template\n- [ ] Team training on security procedures\n\n## Reference Files\n\nFor detailed guidance on specific topics, load these references as needed:\n\n- **`references\u002Ftoken-management.md`** — Bundler-specific env var names and access patterns (Vite \u002F Next \u002F CRA \u002F Angular \u002F CDN). Load when: wiring tokens in a different framework than the Vite example above.\n- **`references\u002Frotation-monitoring.md`** — Token rotation strategies (zero-downtime + emergency), monitoring metrics, alerting rules, and monthly\u002Fquarterly audit checklists. Load when: implementing rotation, setting up monitoring, or conducting audits.\n- **`references\u002Fincident-response.md`** — Step-by-step incident response plan and common security mistakes with code examples. Load when: responding to a token compromise, reviewing code for security issues, or training on anti-patterns.\n\n## When to Use This Skill\n\nInvoke this skill when:\n\n- Creating new tokens\n- Deciding between public vs secret tokens\n- Setting up token restrictions\n- Implementing token rotation\n- Investigating security incidents\n- Conducting security audits\n- Training team on token security\n- Reviewing code for token exposure\n",{"data":34,"body":35},{"name":4,"description":6},{"type":36,"children":37},"root",[38,47,53,60,67,76,101,109,132,140,199,205,212,238,245,273,281,333,339,346,369,376,399,405,411,419,429,599,609,782,788,796,976,984,1109,1117,1225,1233,1357,1363,1369,1374,1380,1389,1399,1408,1417,1423,1428,1896,1902,1908,1917,1945,1954,1982,1990,2065,2071,2079,2107,2115,2138,2146,2208,2442,2448,2469,2477,2512,2518,2526,2579,2587,2651,2659,2708,2716,2765,2771,2776,2820,2826,2831,2874],{"type":39,"tag":40,"props":41,"children":43},"element","h1",{"id":42},"mapbox-token-security-skill",[44],{"type":45,"value":46},"text","Mapbox Token Security Skill",{"type":39,"tag":48,"props":49,"children":50},"p",{},[51],{"type":45,"value":52},"This skill provides security expertise for managing Mapbox access tokens safely and effectively.",{"type":39,"tag":54,"props":55,"children":57},"h2",{"id":56},"token-types-and-when-to-use-them",[58],{"type":45,"value":59},"Token Types and When to Use Them",{"type":39,"tag":61,"props":62,"children":64},"h3",{"id":63},"public-tokens-pk",[65],{"type":45,"value":66},"Public Tokens (pk.*)",{"type":39,"tag":48,"props":68,"children":69},{},[70],{"type":39,"tag":71,"props":72,"children":73},"strong",{},[74],{"type":45,"value":75},"Characteristics:",{"type":39,"tag":77,"props":78,"children":79},"ul",{},[80,86,91,96],{"type":39,"tag":81,"props":82,"children":83},"li",{},[84],{"type":45,"value":85},"Can be safely exposed in client-side code",{"type":39,"tag":81,"props":87,"children":88},{},[89],{"type":45,"value":90},"Limited to specific public scopes only",{"type":39,"tag":81,"props":92,"children":93},{},[94],{"type":45,"value":95},"Can have URL restrictions",{"type":39,"tag":81,"props":97,"children":98},{},[99],{"type":45,"value":100},"Cannot access sensitive APIs",{"type":39,"tag":48,"props":102,"children":103},{},[104],{"type":39,"tag":71,"props":105,"children":106},{},[107],{"type":45,"value":108},"When to use:",{"type":39,"tag":77,"props":110,"children":111},{},[112,117,122,127],{"type":39,"tag":81,"props":113,"children":114},{},[115],{"type":45,"value":116},"Client-side web applications",{"type":39,"tag":81,"props":118,"children":119},{},[120],{"type":45,"value":121},"Mobile apps",{"type":39,"tag":81,"props":123,"children":124},{},[125],{"type":45,"value":126},"Public-facing demos",{"type":39,"tag":81,"props":128,"children":129},{},[130],{"type":45,"value":131},"Embedded maps on websites",{"type":39,"tag":48,"props":133,"children":134},{},[135],{"type":39,"tag":71,"props":136,"children":137},{},[138],{"type":45,"value":139},"Allowed scopes:",{"type":39,"tag":77,"props":141,"children":142},{},[143,155,166,177,188],{"type":39,"tag":81,"props":144,"children":145},{},[146,153],{"type":39,"tag":147,"props":148,"children":150},"code",{"className":149},[],[151],{"type":45,"value":152},"styles:tiles",{"type":45,"value":154}," - Display style tiles (raster)",{"type":39,"tag":81,"props":156,"children":157},{},[158,164],{"type":39,"tag":147,"props":159,"children":161},{"className":160},[],[162],{"type":45,"value":163},"styles:read",{"type":45,"value":165}," - Read style specifications",{"type":39,"tag":81,"props":167,"children":168},{},[169,175],{"type":39,"tag":147,"props":170,"children":172},{"className":171},[],[173],{"type":45,"value":174},"fonts:read",{"type":45,"value":176}," - Access Mapbox fonts",{"type":39,"tag":81,"props":178,"children":179},{},[180,186],{"type":39,"tag":147,"props":181,"children":183},{"className":182},[],[184],{"type":45,"value":185},"datasets:read",{"type":45,"value":187}," - Read dataset data",{"type":39,"tag":81,"props":189,"children":190},{},[191,197],{"type":39,"tag":147,"props":192,"children":194},{"className":193},[],[195],{"type":45,"value":196},"vision:read",{"type":45,"value":198}," - Vision API access",{"type":39,"tag":61,"props":200,"children":202},{"id":201},"secret-tokens-sk",[203],{"type":45,"value":204},"Secret Tokens (sk.*)",{"type":39,"tag":48,"props":206,"children":207},{},[208],{"type":39,"tag":71,"props":209,"children":210},{},[211],{"type":45,"value":75},{"type":39,"tag":77,"props":213,"children":214},{},[215,223,228,233],{"type":39,"tag":81,"props":216,"children":217},{},[218],{"type":39,"tag":71,"props":219,"children":220},{},[221],{"type":45,"value":222},"NEVER expose in client-side code",{"type":39,"tag":81,"props":224,"children":225},{},[226],{"type":45,"value":227},"Full API access with any scopes",{"type":39,"tag":81,"props":229,"children":230},{},[231],{"type":45,"value":232},"Server-side use only",{"type":39,"tag":81,"props":234,"children":235},{},[236],{"type":45,"value":237},"Can create\u002Fmanage other tokens",{"type":39,"tag":48,"props":239,"children":240},{},[241],{"type":39,"tag":71,"props":242,"children":243},{},[244],{"type":45,"value":108},{"type":39,"tag":77,"props":246,"children":247},{},[248,253,258,263,268],{"type":39,"tag":81,"props":249,"children":250},{},[251],{"type":45,"value":252},"Server-side applications",{"type":39,"tag":81,"props":254,"children":255},{},[256],{"type":45,"value":257},"Backend services",{"type":39,"tag":81,"props":259,"children":260},{},[261],{"type":45,"value":262},"CI\u002FCD pipelines",{"type":39,"tag":81,"props":264,"children":265},{},[266],{"type":45,"value":267},"Administrative tasks",{"type":39,"tag":81,"props":269,"children":270},{},[271],{"type":45,"value":272},"Token management",{"type":39,"tag":48,"props":274,"children":275},{},[276],{"type":39,"tag":71,"props":277,"children":278},{},[279],{"type":45,"value":280},"Common scopes:",{"type":39,"tag":77,"props":282,"children":283},{},[284,295,306,317,328],{"type":39,"tag":81,"props":285,"children":286},{},[287,293],{"type":39,"tag":147,"props":288,"children":290},{"className":289},[],[291],{"type":45,"value":292},"styles:write",{"type":45,"value":294}," - Create\u002Fmodify styles",{"type":39,"tag":81,"props":296,"children":297},{},[298,304],{"type":39,"tag":147,"props":299,"children":301},{"className":300},[],[302],{"type":45,"value":303},"styles:list",{"type":45,"value":305}," - List all styles",{"type":39,"tag":81,"props":307,"children":308},{},[309,315],{"type":39,"tag":147,"props":310,"children":312},{"className":311},[],[313],{"type":45,"value":314},"tokens:read",{"type":45,"value":316}," - View token information",{"type":39,"tag":81,"props":318,"children":319},{},[320,326],{"type":39,"tag":147,"props":321,"children":323},{"className":322},[],[324],{"type":45,"value":325},"tokens:write",{"type":45,"value":327}," - Create\u002Fmodify tokens",{"type":39,"tag":81,"props":329,"children":330},{},[331],{"type":45,"value":332},"User feedback management scopes",{"type":39,"tag":61,"props":334,"children":336},{"id":335},"temporary-tokens-tk",[337],{"type":45,"value":338},"Temporary Tokens (tk.*)",{"type":39,"tag":48,"props":340,"children":341},{},[342],{"type":39,"tag":71,"props":343,"children":344},{},[345],{"type":45,"value":75},{"type":39,"tag":77,"props":347,"children":348},{},[349,354,359,364],{"type":39,"tag":81,"props":350,"children":351},{},[352],{"type":45,"value":353},"Short-lived (max 1 hour)",{"type":39,"tag":81,"props":355,"children":356},{},[357],{"type":45,"value":358},"Created by secret tokens",{"type":39,"tag":81,"props":360,"children":361},{},[362],{"type":45,"value":363},"Single-purpose use",{"type":39,"tag":81,"props":365,"children":366},{},[367],{"type":45,"value":368},"Automatically expire",{"type":39,"tag":48,"props":370,"children":371},{},[372],{"type":39,"tag":71,"props":373,"children":374},{},[375],{"type":45,"value":108},{"type":39,"tag":77,"props":377,"children":378},{},[379,384,389,394],{"type":39,"tag":81,"props":380,"children":381},{},[382],{"type":45,"value":383},"One-time operations",{"type":39,"tag":81,"props":385,"children":386},{},[387],{"type":45,"value":388},"Temporary delegated access",{"type":39,"tag":81,"props":390,"children":391},{},[392],{"type":45,"value":393},"Short-lived demos",{"type":39,"tag":81,"props":395,"children":396},{},[397],{"type":45,"value":398},"Security-conscious workflows",{"type":39,"tag":54,"props":400,"children":402},{"id":401},"scope-management-best-practices",[403],{"type":45,"value":404},"Scope Management Best Practices",{"type":39,"tag":61,"props":406,"children":408},{"id":407},"principle-of-least-privilege",[409],{"type":45,"value":410},"Principle of Least Privilege",{"type":39,"tag":48,"props":412,"children":413},{},[414],{"type":39,"tag":71,"props":415,"children":416},{},[417],{"type":45,"value":418},"Always grant the minimum scopes needed:",{"type":39,"tag":48,"props":420,"children":421},{},[422,424],{"type":45,"value":423},"❌ ",{"type":39,"tag":71,"props":425,"children":426},{},[427],{"type":45,"value":428},"Bad:",{"type":39,"tag":430,"props":431,"children":436},"pre",{"className":432,"code":433,"language":434,"meta":435,"style":435},"language-javascript shiki shiki-themes material-theme-lighter material-theme material-theme-palenight","\u002F\u002F Overly permissive - don't do this\n{\n scopes: ['styles:read', 'styles:write', 'styles:list', 'styles:delete', 'tokens:read', 'tokens:write'];\n}\n","javascript","",[437],{"type":39,"tag":147,"props":438,"children":439},{"__ignoreMap":435},[440,452,462,590],{"type":39,"tag":441,"props":442,"children":445},"span",{"class":443,"line":444},"line",1,[446],{"type":39,"tag":441,"props":447,"children":449},{"style":448},"--shiki-light:#90A4AE;--shiki-light-font-style:italic;--shiki-default:#546E7A;--shiki-default-font-style:italic;--shiki-dark:#676E95;--shiki-dark-font-style:italic",[450],{"type":45,"value":451},"\u002F\u002F Overly permissive - don't do this\n",{"type":39,"tag":441,"props":453,"children":455},{"class":443,"line":454},2,[456],{"type":39,"tag":441,"props":457,"children":459},{"style":458},"--shiki-light:#39ADB5;--shiki-default:#89DDFF;--shiki-dark:#89DDFF",[460],{"type":45,"value":461},"{\n",{"type":39,"tag":441,"props":463,"children":465},{"class":443,"line":464},3,[466,472,477,483,488,493,497,502,507,511,515,519,523,527,531,535,539,544,548,552,556,560,564,568,572,576,580,585],{"type":39,"tag":441,"props":467,"children":469},{"style":468},"--shiki-light:#E2931D;--shiki-default:#FFCB6B;--shiki-dark:#FFCB6B",[470],{"type":45,"value":471}," scopes",{"type":39,"tag":441,"props":473,"children":474},{"style":458},[475],{"type":45,"value":476},":",{"type":39,"tag":441,"props":478,"children":480},{"style":479},"--shiki-light:#E53935;--shiki-default:#F07178;--shiki-dark:#F07178",[481],{"type":45,"value":482}," [",{"type":39,"tag":441,"props":484,"children":485},{"style":458},[486],{"type":45,"value":487},"'",{"type":39,"tag":441,"props":489,"children":491},{"style":490},"--shiki-light:#91B859;--shiki-default:#C3E88D;--shiki-dark:#C3E88D",[492],{"type":45,"value":163},{"type":39,"tag":441,"props":494,"children":495},{"style":458},[496],{"type":45,"value":487},{"type":39,"tag":441,"props":498,"children":499},{"style":458},[500],{"type":45,"value":501},",",{"type":39,"tag":441,"props":503,"children":504},{"style":458},[505],{"type":45,"value":506}," '",{"type":39,"tag":441,"props":508,"children":509},{"style":490},[510],{"type":45,"value":292},{"type":39,"tag":441,"props":512,"children":513},{"style":458},[514],{"type":45,"value":487},{"type":39,"tag":441,"props":516,"children":517},{"style":458},[518],{"type":45,"value":501},{"type":39,"tag":441,"props":520,"children":521},{"style":458},[522],{"type":45,"value":506},{"type":39,"tag":441,"props":524,"children":525},{"style":490},[526],{"type":45,"value":303},{"type":39,"tag":441,"props":528,"children":529},{"style":458},[530],{"type":45,"value":487},{"type":39,"tag":441,"props":532,"children":533},{"style":458},[534],{"type":45,"value":501},{"type":39,"tag":441,"props":536,"children":537},{"style":458},[538],{"type":45,"value":506},{"type":39,"tag":441,"props":540,"children":541},{"style":490},[542],{"type":45,"value":543},"styles:delete",{"type":39,"tag":441,"props":545,"children":546},{"style":458},[547],{"type":45,"value":487},{"type":39,"tag":441,"props":549,"children":550},{"style":458},[551],{"type":45,"value":501},{"type":39,"tag":441,"props":553,"children":554},{"style":458},[555],{"type":45,"value":506},{"type":39,"tag":441,"props":557,"children":558},{"style":490},[559],{"type":45,"value":314},{"type":39,"tag":441,"props":561,"children":562},{"style":458},[563],{"type":45,"value":487},{"type":39,"tag":441,"props":565,"children":566},{"style":458},[567],{"type":45,"value":501},{"type":39,"tag":441,"props":569,"children":570},{"style":458},[571],{"type":45,"value":506},{"type":39,"tag":441,"props":573,"children":574},{"style":490},[575],{"type":45,"value":325},{"type":39,"tag":441,"props":577,"children":578},{"style":458},[579],{"type":45,"value":487},{"type":39,"tag":441,"props":581,"children":582},{"style":479},[583],{"type":45,"value":584},"]",{"type":39,"tag":441,"props":586,"children":587},{"style":458},[588],{"type":45,"value":589},";\n",{"type":39,"tag":441,"props":591,"children":593},{"class":443,"line":592},4,[594],{"type":39,"tag":441,"props":595,"children":596},{"style":458},[597],{"type":45,"value":598},"}\n",{"type":39,"tag":48,"props":600,"children":601},{},[602,604],{"type":45,"value":603},"✅ ",{"type":39,"tag":71,"props":605,"children":606},{},[607],{"type":45,"value":608},"Good:",{"type":39,"tag":430,"props":610,"children":612},{"className":432,"code":611,"language":434,"meta":435,"style":435},"\u002F\u002F Only what's needed for displaying a map\n{\n scopes: ['styles:read', 'fonts:read'];\n}\n\u002F\u002F Add 'styles:tiles' if your map uses raster tile sources\n{\n scopes: ['styles:read', 'fonts:read', 'styles:tiles'];\n}\n",[613],{"type":39,"tag":147,"props":614,"children":615},{"__ignoreMap":435},[616,624,631,682,689,698,706,774],{"type":39,"tag":441,"props":617,"children":618},{"class":443,"line":444},[619],{"type":39,"tag":441,"props":620,"children":621},{"style":448},[622],{"type":45,"value":623},"\u002F\u002F Only what's needed for displaying a map\n",{"type":39,"tag":441,"props":625,"children":626},{"class":443,"line":454},[627],{"type":39,"tag":441,"props":628,"children":629},{"style":458},[630],{"type":45,"value":461},{"type":39,"tag":441,"props":632,"children":633},{"class":443,"line":464},[634,638,642,646,650,654,658,662,666,670,674,678],{"type":39,"tag":441,"props":635,"children":636},{"style":468},[637],{"type":45,"value":471},{"type":39,"tag":441,"props":639,"children":640},{"style":458},[641],{"type":45,"value":476},{"type":39,"tag":441,"props":643,"children":644},{"style":479},[645],{"type":45,"value":482},{"type":39,"tag":441,"props":647,"children":648},{"style":458},[649],{"type":45,"value":487},{"type":39,"tag":441,"props":651,"children":652},{"style":490},[653],{"type":45,"value":163},{"type":39,"tag":441,"props":655,"children":656},{"style":458},[657],{"type":45,"value":487},{"type":39,"tag":441,"props":659,"children":660},{"style":458},[661],{"type":45,"value":501},{"type":39,"tag":441,"props":663,"children":664},{"style":458},[665],{"type":45,"value":506},{"type":39,"tag":441,"props":667,"children":668},{"style":490},[669],{"type":45,"value":174},{"type":39,"tag":441,"props":671,"children":672},{"style":458},[673],{"type":45,"value":487},{"type":39,"tag":441,"props":675,"children":676},{"style":479},[677],{"type":45,"value":584},{"type":39,"tag":441,"props":679,"children":680},{"style":458},[681],{"type":45,"value":589},{"type":39,"tag":441,"props":683,"children":684},{"class":443,"line":592},[685],{"type":39,"tag":441,"props":686,"children":687},{"style":458},[688],{"type":45,"value":598},{"type":39,"tag":441,"props":690,"children":692},{"class":443,"line":691},5,[693],{"type":39,"tag":441,"props":694,"children":695},{"style":448},[696],{"type":45,"value":697},"\u002F\u002F Add 'styles:tiles' if your map uses raster tile sources\n",{"type":39,"tag":441,"props":699,"children":701},{"class":443,"line":700},6,[702],{"type":39,"tag":441,"props":703,"children":704},{"style":458},[705],{"type":45,"value":461},{"type":39,"tag":441,"props":707,"children":709},{"class":443,"line":708},7,[710,714,718,722,726,730,734,738,742,746,750,754,758,762,766,770],{"type":39,"tag":441,"props":711,"children":712},{"style":468},[713],{"type":45,"value":471},{"type":39,"tag":441,"props":715,"children":716},{"style":458},[717],{"type":45,"value":476},{"type":39,"tag":441,"props":719,"children":720},{"style":479},[721],{"type":45,"value":482},{"type":39,"tag":441,"props":723,"children":724},{"style":458},[725],{"type":45,"value":487},{"type":39,"tag":441,"props":727,"children":728},{"style":490},[729],{"type":45,"value":163},{"type":39,"tag":441,"props":731,"children":732},{"style":458},[733],{"type":45,"value":487},{"type":39,"tag":441,"props":735,"children":736},{"style":458},[737],{"type":45,"value":501},{"type":39,"tag":441,"props":739,"children":740},{"style":458},[741],{"type":45,"value":506},{"type":39,"tag":441,"props":743,"children":744},{"style":490},[745],{"type":45,"value":174},{"type":39,"tag":441,"props":747,"children":748},{"style":458},[749],{"type":45,"value":487},{"type":39,"tag":441,"props":751,"children":752},{"style":458},[753],{"type":45,"value":501},{"type":39,"tag":441,"props":755,"children":756},{"style":458},[757],{"type":45,"value":506},{"type":39,"tag":441,"props":759,"children":760},{"style":490},[761],{"type":45,"value":152},{"type":39,"tag":441,"props":763,"children":764},{"style":458},[765],{"type":45,"value":487},{"type":39,"tag":441,"props":767,"children":768},{"style":479},[769],{"type":45,"value":584},{"type":39,"tag":441,"props":771,"children":772},{"style":458},[773],{"type":45,"value":589},{"type":39,"tag":441,"props":775,"children":777},{"class":443,"line":776},8,[778],{"type":39,"tag":441,"props":779,"children":780},{"style":458},[781],{"type":45,"value":598},{"type":39,"tag":61,"props":783,"children":785},{"id":784},"scope-combinations-by-use-case",[786],{"type":45,"value":787},"Scope Combinations by Use Case",{"type":39,"tag":48,"props":789,"children":790},{},[791],{"type":39,"tag":71,"props":792,"children":793},{},[794],{"type":45,"value":795},"Public Map Display (client-side):",{"type":39,"tag":430,"props":797,"children":801},{"className":798,"code":799,"language":800,"meta":435,"style":435},"language-json shiki shiki-themes material-theme-lighter material-theme material-theme-palenight","{\n \"scopes\": [\"styles:read\", \"fonts:read\", \"styles:tiles\"],\n \"note\": \"Public token for map display\",\n \"allowedUrls\": [\"https:\u002F\u002Fmyapp.com\u002F*\"]\n}\n","json",[802],{"type":39,"tag":147,"props":803,"children":804},{"__ignoreMap":435},[805,812,889,927,969],{"type":39,"tag":441,"props":806,"children":807},{"class":443,"line":444},[808],{"type":39,"tag":441,"props":809,"children":810},{"style":458},[811],{"type":45,"value":461},{"type":39,"tag":441,"props":813,"children":814},{"class":443,"line":454},[815,820,826,831,835,839,843,847,851,855,860,864,868,872,876,880,884],{"type":39,"tag":441,"props":816,"children":817},{"style":458},[818],{"type":45,"value":819}," \"",{"type":39,"tag":441,"props":821,"children":823},{"style":822},"--shiki-light:#9C3EDA;--shiki-default:#C792EA;--shiki-dark:#C792EA",[824],{"type":45,"value":825},"scopes",{"type":39,"tag":441,"props":827,"children":828},{"style":458},[829],{"type":45,"value":830},"\"",{"type":39,"tag":441,"props":832,"children":833},{"style":458},[834],{"type":45,"value":476},{"type":39,"tag":441,"props":836,"children":837},{"style":458},[838],{"type":45,"value":482},{"type":39,"tag":441,"props":840,"children":841},{"style":458},[842],{"type":45,"value":830},{"type":39,"tag":441,"props":844,"children":845},{"style":490},[846],{"type":45,"value":163},{"type":39,"tag":441,"props":848,"children":849},{"style":458},[850],{"type":45,"value":830},{"type":39,"tag":441,"props":852,"children":853},{"style":458},[854],{"type":45,"value":501},{"type":39,"tag":441,"props":856,"children":857},{"style":458},[858],{"type":45,"value":859}," \"",{"type":39,"tag":441,"props":861,"children":862},{"style":490},[863],{"type":45,"value":174},{"type":39,"tag":441,"props":865,"children":866},{"style":458},[867],{"type":45,"value":830},{"type":39,"tag":441,"props":869,"children":870},{"style":458},[871],{"type":45,"value":501},{"type":39,"tag":441,"props":873,"children":874},{"style":458},[875],{"type":45,"value":859},{"type":39,"tag":441,"props":877,"children":878},{"style":490},[879],{"type":45,"value":152},{"type":39,"tag":441,"props":881,"children":882},{"style":458},[883],{"type":45,"value":830},{"type":39,"tag":441,"props":885,"children":886},{"style":458},[887],{"type":45,"value":888},"],\n",{"type":39,"tag":441,"props":890,"children":891},{"class":443,"line":464},[892,896,901,905,909,913,918,922],{"type":39,"tag":441,"props":893,"children":894},{"style":458},[895],{"type":45,"value":819},{"type":39,"tag":441,"props":897,"children":898},{"style":822},[899],{"type":45,"value":900},"note",{"type":39,"tag":441,"props":902,"children":903},{"style":458},[904],{"type":45,"value":830},{"type":39,"tag":441,"props":906,"children":907},{"style":458},[908],{"type":45,"value":476},{"type":39,"tag":441,"props":910,"children":911},{"style":458},[912],{"type":45,"value":859},{"type":39,"tag":441,"props":914,"children":915},{"style":490},[916],{"type":45,"value":917},"Public token for map display",{"type":39,"tag":441,"props":919,"children":920},{"style":458},[921],{"type":45,"value":830},{"type":39,"tag":441,"props":923,"children":924},{"style":458},[925],{"type":45,"value":926},",\n",{"type":39,"tag":441,"props":928,"children":929},{"class":443,"line":592},[930,934,939,943,947,951,955,960,964],{"type":39,"tag":441,"props":931,"children":932},{"style":458},[933],{"type":45,"value":819},{"type":39,"tag":441,"props":935,"children":936},{"style":822},[937],{"type":45,"value":938},"allowedUrls",{"type":39,"tag":441,"props":940,"children":941},{"style":458},[942],{"type":45,"value":830},{"type":39,"tag":441,"props":944,"children":945},{"style":458},[946],{"type":45,"value":476},{"type":39,"tag":441,"props":948,"children":949},{"style":458},[950],{"type":45,"value":482},{"type":39,"tag":441,"props":952,"children":953},{"style":458},[954],{"type":45,"value":830},{"type":39,"tag":441,"props":956,"children":957},{"style":490},[958],{"type":45,"value":959},"https:\u002F\u002Fmyapp.com\u002F*",{"type":39,"tag":441,"props":961,"children":962},{"style":458},[963],{"type":45,"value":830},{"type":39,"tag":441,"props":965,"children":966},{"style":458},[967],{"type":45,"value":968},"]\n",{"type":39,"tag":441,"props":970,"children":971},{"class":443,"line":691},[972],{"type":39,"tag":441,"props":973,"children":974},{"style":458},[975],{"type":45,"value":598},{"type":39,"tag":48,"props":977,"children":978},{},[979],{"type":39,"tag":71,"props":980,"children":981},{},[982],{"type":45,"value":983},"Style Management (server-side):",{"type":39,"tag":430,"props":985,"children":987},{"className":798,"code":986,"language":800,"meta":435,"style":435},"{\n \"scopes\": [\"styles:read\", \"styles:write\", \"styles:list\"],\n \"note\": \"Backend style management - SECRET TOKEN\"\n}\n",[988],{"type":39,"tag":147,"props":989,"children":990},{"__ignoreMap":435},[991,998,1069,1102],{"type":39,"tag":441,"props":992,"children":993},{"class":443,"line":444},[994],{"type":39,"tag":441,"props":995,"children":996},{"style":458},[997],{"type":45,"value":461},{"type":39,"tag":441,"props":999,"children":1000},{"class":443,"line":454},[1001,1005,1009,1013,1017,1021,1025,1029,1033,1037,1041,1045,1049,1053,1057,1061,1065],{"type":39,"tag":441,"props":1002,"children":1003},{"style":458},[1004],{"type":45,"value":819},{"type":39,"tag":441,"props":1006,"children":1007},{"style":822},[1008],{"type":45,"value":825},{"type":39,"tag":441,"props":1010,"children":1011},{"style":458},[1012],{"type":45,"value":830},{"type":39,"tag":441,"props":1014,"children":1015},{"style":458},[1016],{"type":45,"value":476},{"type":39,"tag":441,"props":1018,"children":1019},{"style":458},[1020],{"type":45,"value":482},{"type":39,"tag":441,"props":1022,"children":1023},{"style":458},[1024],{"type":45,"value":830},{"type":39,"tag":441,"props":1026,"children":1027},{"style":490},[1028],{"type":45,"value":163},{"type":39,"tag":441,"props":1030,"children":1031},{"style":458},[1032],{"type":45,"value":830},{"type":39,"tag":441,"props":1034,"children":1035},{"style":458},[1036],{"type":45,"value":501},{"type":39,"tag":441,"props":1038,"children":1039},{"style":458},[1040],{"type":45,"value":859},{"type":39,"tag":441,"props":1042,"children":1043},{"style":490},[1044],{"type":45,"value":292},{"type":39,"tag":441,"props":1046,"children":1047},{"style":458},[1048],{"type":45,"value":830},{"type":39,"tag":441,"props":1050,"children":1051},{"style":458},[1052],{"type":45,"value":501},{"type":39,"tag":441,"props":1054,"children":1055},{"style":458},[1056],{"type":45,"value":859},{"type":39,"tag":441,"props":1058,"children":1059},{"style":490},[1060],{"type":45,"value":303},{"type":39,"tag":441,"props":1062,"children":1063},{"style":458},[1064],{"type":45,"value":830},{"type":39,"tag":441,"props":1066,"children":1067},{"style":458},[1068],{"type":45,"value":888},{"type":39,"tag":441,"props":1070,"children":1071},{"class":443,"line":464},[1072,1076,1080,1084,1088,1092,1097],{"type":39,"tag":441,"props":1073,"children":1074},{"style":458},[1075],{"type":45,"value":819},{"type":39,"tag":441,"props":1077,"children":1078},{"style":822},[1079],{"type":45,"value":900},{"type":39,"tag":441,"props":1081,"children":1082},{"style":458},[1083],{"type":45,"value":830},{"type":39,"tag":441,"props":1085,"children":1086},{"style":458},[1087],{"type":45,"value":476},{"type":39,"tag":441,"props":1089,"children":1090},{"style":458},[1091],{"type":45,"value":859},{"type":39,"tag":441,"props":1093,"children":1094},{"style":490},[1095],{"type":45,"value":1096},"Backend style management - SECRET TOKEN",{"type":39,"tag":441,"props":1098,"children":1099},{"style":458},[1100],{"type":45,"value":1101},"\"\n",{"type":39,"tag":441,"props":1103,"children":1104},{"class":443,"line":592},[1105],{"type":39,"tag":441,"props":1106,"children":1107},{"style":458},[1108],{"type":45,"value":598},{"type":39,"tag":48,"props":1110,"children":1111},{},[1112],{"type":39,"tag":71,"props":1113,"children":1114},{},[1115],{"type":45,"value":1116},"Token Administration (server-side):",{"type":39,"tag":430,"props":1118,"children":1120},{"className":798,"code":1119,"language":800,"meta":435,"style":435},"{\n \"scopes\": [\"tokens:read\", \"tokens:write\"],\n \"note\": \"Token management only - SECRET TOKEN\"\n}\n",[1121],{"type":39,"tag":147,"props":1122,"children":1123},{"__ignoreMap":435},[1124,1131,1186,1218],{"type":39,"tag":441,"props":1125,"children":1126},{"class":443,"line":444},[1127],{"type":39,"tag":441,"props":1128,"children":1129},{"style":458},[1130],{"type":45,"value":461},{"type":39,"tag":441,"props":1132,"children":1133},{"class":443,"line":454},[1134,1138,1142,1146,1150,1154,1158,1162,1166,1170,1174,1178,1182],{"type":39,"tag":441,"props":1135,"children":1136},{"style":458},[1137],{"type":45,"value":819},{"type":39,"tag":441,"props":1139,"children":1140},{"style":822},[1141],{"type":45,"value":825},{"type":39,"tag":441,"props":1143,"children":1144},{"style":458},[1145],{"type":45,"value":830},{"type":39,"tag":441,"props":1147,"children":1148},{"style":458},[1149],{"type":45,"value":476},{"type":39,"tag":441,"props":1151,"children":1152},{"style":458},[1153],{"type":45,"value":482},{"type":39,"tag":441,"props":1155,"children":1156},{"style":458},[1157],{"type":45,"value":830},{"type":39,"tag":441,"props":1159,"children":1160},{"style":490},[1161],{"type":45,"value":314},{"type":39,"tag":441,"props":1163,"children":1164},{"style":458},[1165],{"type":45,"value":830},{"type":39,"tag":441,"props":1167,"children":1168},{"style":458},[1169],{"type":45,"value":501},{"type":39,"tag":441,"props":1171,"children":1172},{"style":458},[1173],{"type":45,"value":859},{"type":39,"tag":441,"props":1175,"children":1176},{"style":490},[1177],{"type":45,"value":325},{"type":39,"tag":441,"props":1179,"children":1180},{"style":458},[1181],{"type":45,"value":830},{"type":39,"tag":441,"props":1183,"children":1184},{"style":458},[1185],{"type":45,"value":888},{"type":39,"tag":441,"props":1187,"children":1188},{"class":443,"line":464},[1189,1193,1197,1201,1205,1209,1214],{"type":39,"tag":441,"props":1190,"children":1191},{"style":458},[1192],{"type":45,"value":819},{"type":39,"tag":441,"props":1194,"children":1195},{"style":822},[1196],{"type":45,"value":900},{"type":39,"tag":441,"props":1198,"children":1199},{"style":458},[1200],{"type":45,"value":830},{"type":39,"tag":441,"props":1202,"children":1203},{"style":458},[1204],{"type":45,"value":476},{"type":39,"tag":441,"props":1206,"children":1207},{"style":458},[1208],{"type":45,"value":859},{"type":39,"tag":441,"props":1210,"children":1211},{"style":490},[1212],{"type":45,"value":1213},"Token management only - SECRET TOKEN",{"type":39,"tag":441,"props":1215,"children":1216},{"style":458},[1217],{"type":45,"value":1101},{"type":39,"tag":441,"props":1219,"children":1220},{"class":443,"line":592},[1221],{"type":39,"tag":441,"props":1222,"children":1223},{"style":458},[1224],{"type":45,"value":598},{"type":39,"tag":48,"props":1226,"children":1227},{},[1228],{"type":39,"tag":71,"props":1229,"children":1230},{},[1231],{"type":45,"value":1232},"Read-Only Access:",{"type":39,"tag":430,"props":1234,"children":1236},{"className":798,"code":1235,"language":800,"meta":435,"style":435},"{\n \"scopes\": [\"styles:list\", \"styles:read\", \"tokens:read\"],\n \"note\": \"Auditing\u002Fmonitoring - SECRET TOKEN\"\n}\n",[1237],{"type":39,"tag":147,"props":1238,"children":1239},{"__ignoreMap":435},[1240,1247,1318,1350],{"type":39,"tag":441,"props":1241,"children":1242},{"class":443,"line":444},[1243],{"type":39,"tag":441,"props":1244,"children":1245},{"style":458},[1246],{"type":45,"value":461},{"type":39,"tag":441,"props":1248,"children":1249},{"class":443,"line":454},[1250,1254,1258,1262,1266,1270,1274,1278,1282,1286,1290,1294,1298,1302,1306,1310,1314],{"type":39,"tag":441,"props":1251,"children":1252},{"style":458},[1253],{"type":45,"value":819},{"type":39,"tag":441,"props":1255,"children":1256},{"style":822},[1257],{"type":45,"value":825},{"type":39,"tag":441,"props":1259,"children":1260},{"style":458},[1261],{"type":45,"value":830},{"type":39,"tag":441,"props":1263,"children":1264},{"style":458},[1265],{"type":45,"value":476},{"type":39,"tag":441,"props":1267,"children":1268},{"style":458},[1269],{"type":45,"value":482},{"type":39,"tag":441,"props":1271,"children":1272},{"style":458},[1273],{"type":45,"value":830},{"type":39,"tag":441,"props":1275,"children":1276},{"style":490},[1277],{"type":45,"value":303},{"type":39,"tag":441,"props":1279,"children":1280},{"style":458},[1281],{"type":45,"value":830},{"type":39,"tag":441,"props":1283,"children":1284},{"style":458},[1285],{"type":45,"value":501},{"type":39,"tag":441,"props":1287,"children":1288},{"style":458},[1289],{"type":45,"value":859},{"type":39,"tag":441,"props":1291,"children":1292},{"style":490},[1293],{"type":45,"value":163},{"type":39,"tag":441,"props":1295,"children":1296},{"style":458},[1297],{"type":45,"value":830},{"type":39,"tag":441,"props":1299,"children":1300},{"style":458},[1301],{"type":45,"value":501},{"type":39,"tag":441,"props":1303,"children":1304},{"style":458},[1305],{"type":45,"value":859},{"type":39,"tag":441,"props":1307,"children":1308},{"style":490},[1309],{"type":45,"value":314},{"type":39,"tag":441,"props":1311,"children":1312},{"style":458},[1313],{"type":45,"value":830},{"type":39,"tag":441,"props":1315,"children":1316},{"style":458},[1317],{"type":45,"value":888},{"type":39,"tag":441,"props":1319,"children":1320},{"class":443,"line":464},[1321,1325,1329,1333,1337,1341,1346],{"type":39,"tag":441,"props":1322,"children":1323},{"style":458},[1324],{"type":45,"value":819},{"type":39,"tag":441,"props":1326,"children":1327},{"style":822},[1328],{"type":45,"value":900},{"type":39,"tag":441,"props":1330,"children":1331},{"style":458},[1332],{"type":45,"value":830},{"type":39,"tag":441,"props":1334,"children":1335},{"style":458},[1336],{"type":45,"value":476},{"type":39,"tag":441,"props":1338,"children":1339},{"style":458},[1340],{"type":45,"value":859},{"type":39,"tag":441,"props":1342,"children":1343},{"style":490},[1344],{"type":45,"value":1345},"Auditing\u002Fmonitoring - SECRET TOKEN",{"type":39,"tag":441,"props":1347,"children":1348},{"style":458},[1349],{"type":45,"value":1101},{"type":39,"tag":441,"props":1351,"children":1352},{"class":443,"line":592},[1353],{"type":39,"tag":441,"props":1354,"children":1355},{"style":458},[1356],{"type":45,"value":598},{"type":39,"tag":54,"props":1358,"children":1360},{"id":1359},"url-restrictions",[1361],{"type":45,"value":1362},"URL Restrictions",{"type":39,"tag":61,"props":1364,"children":1366},{"id":1365},"why-url-restrictions-matter",[1367],{"type":45,"value":1368},"Why URL Restrictions Matter",{"type":39,"tag":48,"props":1370,"children":1371},{},[1372],{"type":45,"value":1373},"URL restrictions limit where a public token can be used, preventing unauthorized usage if the token is exposed.",{"type":39,"tag":61,"props":1375,"children":1377},{"id":1376},"effective-url-patterns",[1378],{"type":45,"value":1379},"Effective URL Patterns",{"type":39,"tag":48,"props":1381,"children":1382},{},[1383,1384],{"type":45,"value":603},{"type":39,"tag":71,"props":1385,"children":1386},{},[1387],{"type":45,"value":1388},"Recommended patterns:",{"type":39,"tag":430,"props":1390,"children":1394},{"className":1391,"code":1393,"language":45},[1392],"language-text","https:\u002F\u002Fmyapp.com\u002F* # Production domain\nhttps:\u002F\u002F*.myapp.com\u002F* # All subdomains\nhttps:\u002F\u002Fstaging.myapp.com\u002F* # Staging environment\nhttp:\u002F\u002Flocalhost:* # Local development\n",[1395],{"type":39,"tag":147,"props":1396,"children":1397},{"__ignoreMap":435},[1398],{"type":45,"value":1393},{"type":39,"tag":48,"props":1400,"children":1401},{},[1402,1403],{"type":45,"value":423},{"type":39,"tag":71,"props":1404,"children":1405},{},[1406],{"type":45,"value":1407},"Avoid these:",{"type":39,"tag":430,"props":1409,"children":1412},{"className":1410,"code":1411,"language":45},[1392],"* # No restriction (insecure)\nhttp:\u002F\u002F* # Any HTTP site (insecure)\n*.com\u002F* # Too broad\n",[1413],{"type":39,"tag":147,"props":1414,"children":1415},{"__ignoreMap":435},[1416],{"type":45,"value":1411},{"type":39,"tag":61,"props":1418,"children":1420},{"id":1419},"multiple-environment-strategy",[1421],{"type":45,"value":1422},"Multiple Environment Strategy",{"type":39,"tag":48,"props":1424,"children":1425},{},[1426],{"type":45,"value":1427},"Create separate tokens for each environment:",{"type":39,"tag":430,"props":1429,"children":1431},{"className":432,"code":1430,"language":434,"meta":435,"style":435},"\u002F\u002F Production\n{\n note: \"Production - myapp.com\",\n scopes: [\"styles:read\", \"fonts:read\"],\n allowedUrls: [\"https:\u002F\u002Fmyapp.com\u002F*\", \"https:\u002F\u002Fwww.myapp.com\u002F*\"]\n}\n\n\u002F\u002F Staging\n{\n note: \"Staging - staging.myapp.com\",\n scopes: [\"styles:read\", \"fonts:read\"],\n allowedUrls: [\"https:\u002F\u002Fstaging.myapp.com\u002F*\"]\n}\n\n\u002F\u002F Development\n{\n note: \"Development - localhost\",\n scopes: [\"styles:read\", \"fonts:read\"],\n allowedUrls: [\"http:\u002F\u002Flocalhost:*\", \"http:\u002F\u002F127.0.0.1:*\"]\n}\n",[1432],{"type":39,"tag":147,"props":1433,"children":1434},{"__ignoreMap":435},[1435,1443,1450,1479,1530,1579,1586,1595,1603,1611,1639,1691,1724,1732,1740,1749,1757,1786,1838,1888],{"type":39,"tag":441,"props":1436,"children":1437},{"class":443,"line":444},[1438],{"type":39,"tag":441,"props":1439,"children":1440},{"style":448},[1441],{"type":45,"value":1442},"\u002F\u002F Production\n",{"type":39,"tag":441,"props":1444,"children":1445},{"class":443,"line":454},[1446],{"type":39,"tag":441,"props":1447,"children":1448},{"style":458},[1449],{"type":45,"value":461},{"type":39,"tag":441,"props":1451,"children":1452},{"class":443,"line":464},[1453,1458,1462,1466,1471,1475],{"type":39,"tag":441,"props":1454,"children":1455},{"style":468},[1456],{"type":45,"value":1457}," note",{"type":39,"tag":441,"props":1459,"children":1460},{"style":458},[1461],{"type":45,"value":476},{"type":39,"tag":441,"props":1463,"children":1464},{"style":458},[1465],{"type":45,"value":859},{"type":39,"tag":441,"props":1467,"children":1468},{"style":490},[1469],{"type":45,"value":1470},"Production - myapp.com",{"type":39,"tag":441,"props":1472,"children":1473},{"style":458},[1474],{"type":45,"value":830},{"type":39,"tag":441,"props":1476,"children":1477},{"style":458},[1478],{"type":45,"value":926},{"type":39,"tag":441,"props":1480,"children":1481},{"class":443,"line":592},[1482,1486,1490,1494,1498,1502,1506,1510,1514,1518,1522,1526],{"type":39,"tag":441,"props":1483,"children":1484},{"style":468},[1485],{"type":45,"value":471},{"type":39,"tag":441,"props":1487,"children":1488},{"style":458},[1489],{"type":45,"value":476},{"type":39,"tag":441,"props":1491,"children":1492},{"style":479},[1493],{"type":45,"value":482},{"type":39,"tag":441,"props":1495,"children":1496},{"style":458},[1497],{"type":45,"value":830},{"type":39,"tag":441,"props":1499,"children":1500},{"style":490},[1501],{"type":45,"value":163},{"type":39,"tag":441,"props":1503,"children":1504},{"style":458},[1505],{"type":45,"value":830},{"type":39,"tag":441,"props":1507,"children":1508},{"style":458},[1509],{"type":45,"value":501},{"type":39,"tag":441,"props":1511,"children":1512},{"style":458},[1513],{"type":45,"value":859},{"type":39,"tag":441,"props":1515,"children":1516},{"style":490},[1517],{"type":45,"value":174},{"type":39,"tag":441,"props":1519,"children":1520},{"style":458},[1521],{"type":45,"value":830},{"type":39,"tag":441,"props":1523,"children":1524},{"style":479},[1525],{"type":45,"value":584},{"type":39,"tag":441,"props":1527,"children":1528},{"style":458},[1529],{"type":45,"value":926},{"type":39,"tag":441,"props":1531,"children":1532},{"class":443,"line":691},[1533,1538,1542,1546,1550,1554,1558,1562,1566,1571,1575],{"type":39,"tag":441,"props":1534,"children":1535},{"style":468},[1536],{"type":45,"value":1537}," allowedUrls",{"type":39,"tag":441,"props":1539,"children":1540},{"style":458},[1541],{"type":45,"value":476},{"type":39,"tag":441,"props":1543,"children":1544},{"style":479},[1545],{"type":45,"value":482},{"type":39,"tag":441,"props":1547,"children":1548},{"style":458},[1549],{"type":45,"value":830},{"type":39,"tag":441,"props":1551,"children":1552},{"style":490},[1553],{"type":45,"value":959},{"type":39,"tag":441,"props":1555,"children":1556},{"style":458},[1557],{"type":45,"value":830},{"type":39,"tag":441,"props":1559,"children":1560},{"style":458},[1561],{"type":45,"value":501},{"type":39,"tag":441,"props":1563,"children":1564},{"style":458},[1565],{"type":45,"value":859},{"type":39,"tag":441,"props":1567,"children":1568},{"style":490},[1569],{"type":45,"value":1570},"https:\u002F\u002Fwww.myapp.com\u002F*",{"type":39,"tag":441,"props":1572,"children":1573},{"style":458},[1574],{"type":45,"value":830},{"type":39,"tag":441,"props":1576,"children":1577},{"style":479},[1578],{"type":45,"value":968},{"type":39,"tag":441,"props":1580,"children":1581},{"class":443,"line":700},[1582],{"type":39,"tag":441,"props":1583,"children":1584},{"style":458},[1585],{"type":45,"value":598},{"type":39,"tag":441,"props":1587,"children":1588},{"class":443,"line":708},[1589],{"type":39,"tag":441,"props":1590,"children":1592},{"emptyLinePlaceholder":1591},true,[1593],{"type":45,"value":1594},"\n",{"type":39,"tag":441,"props":1596,"children":1597},{"class":443,"line":776},[1598],{"type":39,"tag":441,"props":1599,"children":1600},{"style":448},[1601],{"type":45,"value":1602},"\u002F\u002F Staging\n",{"type":39,"tag":441,"props":1604,"children":1606},{"class":443,"line":1605},9,[1607],{"type":39,"tag":441,"props":1608,"children":1609},{"style":458},[1610],{"type":45,"value":461},{"type":39,"tag":441,"props":1612,"children":1613},{"class":443,"line":27},[1614,1618,1622,1626,1631,1635],{"type":39,"tag":441,"props":1615,"children":1616},{"style":468},[1617],{"type":45,"value":1457},{"type":39,"tag":441,"props":1619,"children":1620},{"style":458},[1621],{"type":45,"value":476},{"type":39,"tag":441,"props":1623,"children":1624},{"style":458},[1625],{"type":45,"value":859},{"type":39,"tag":441,"props":1627,"children":1628},{"style":490},[1629],{"type":45,"value":1630},"Staging - staging.myapp.com",{"type":39,"tag":441,"props":1632,"children":1633},{"style":458},[1634],{"type":45,"value":830},{"type":39,"tag":441,"props":1636,"children":1637},{"style":458},[1638],{"type":45,"value":926},{"type":39,"tag":441,"props":1640,"children":1642},{"class":443,"line":1641},11,[1643,1647,1651,1655,1659,1663,1667,1671,1675,1679,1683,1687],{"type":39,"tag":441,"props":1644,"children":1645},{"style":468},[1646],{"type":45,"value":471},{"type":39,"tag":441,"props":1648,"children":1649},{"style":458},[1650],{"type":45,"value":476},{"type":39,"tag":441,"props":1652,"children":1653},{"style":479},[1654],{"type":45,"value":482},{"type":39,"tag":441,"props":1656,"children":1657},{"style":458},[1658],{"type":45,"value":830},{"type":39,"tag":441,"props":1660,"children":1661},{"style":490},[1662],{"type":45,"value":163},{"type":39,"tag":441,"props":1664,"children":1665},{"style":458},[1666],{"type":45,"value":830},{"type":39,"tag":441,"props":1668,"children":1669},{"style":458},[1670],{"type":45,"value":501},{"type":39,"tag":441,"props":1672,"children":1673},{"style":458},[1674],{"type":45,"value":859},{"type":39,"tag":441,"props":1676,"children":1677},{"style":490},[1678],{"type":45,"value":174},{"type":39,"tag":441,"props":1680,"children":1681},{"style":458},[1682],{"type":45,"value":830},{"type":39,"tag":441,"props":1684,"children":1685},{"style":479},[1686],{"type":45,"value":584},{"type":39,"tag":441,"props":1688,"children":1689},{"style":458},[1690],{"type":45,"value":926},{"type":39,"tag":441,"props":1692,"children":1694},{"class":443,"line":1693},12,[1695,1699,1703,1707,1711,1716,1720],{"type":39,"tag":441,"props":1696,"children":1697},{"style":468},[1698],{"type":45,"value":1537},{"type":39,"tag":441,"props":1700,"children":1701},{"style":458},[1702],{"type":45,"value":476},{"type":39,"tag":441,"props":1704,"children":1705},{"style":479},[1706],{"type":45,"value":482},{"type":39,"tag":441,"props":1708,"children":1709},{"style":458},[1710],{"type":45,"value":830},{"type":39,"tag":441,"props":1712,"children":1713},{"style":490},[1714],{"type":45,"value":1715},"https:\u002F\u002Fstaging.myapp.com\u002F*",{"type":39,"tag":441,"props":1717,"children":1718},{"style":458},[1719],{"type":45,"value":830},{"type":39,"tag":441,"props":1721,"children":1722},{"style":479},[1723],{"type":45,"value":968},{"type":39,"tag":441,"props":1725,"children":1727},{"class":443,"line":1726},13,[1728],{"type":39,"tag":441,"props":1729,"children":1730},{"style":458},[1731],{"type":45,"value":598},{"type":39,"tag":441,"props":1733,"children":1735},{"class":443,"line":1734},14,[1736],{"type":39,"tag":441,"props":1737,"children":1738},{"emptyLinePlaceholder":1591},[1739],{"type":45,"value":1594},{"type":39,"tag":441,"props":1741,"children":1743},{"class":443,"line":1742},15,[1744],{"type":39,"tag":441,"props":1745,"children":1746},{"style":448},[1747],{"type":45,"value":1748},"\u002F\u002F Development\n",{"type":39,"tag":441,"props":1750,"children":1752},{"class":443,"line":1751},16,[1753],{"type":39,"tag":441,"props":1754,"children":1755},{"style":458},[1756],{"type":45,"value":461},{"type":39,"tag":441,"props":1758,"children":1760},{"class":443,"line":1759},17,[1761,1765,1769,1773,1778,1782],{"type":39,"tag":441,"props":1762,"children":1763},{"style":468},[1764],{"type":45,"value":1457},{"type":39,"tag":441,"props":1766,"children":1767},{"style":458},[1768],{"type":45,"value":476},{"type":39,"tag":441,"props":1770,"children":1771},{"style":458},[1772],{"type":45,"value":859},{"type":39,"tag":441,"props":1774,"children":1775},{"style":490},[1776],{"type":45,"value":1777},"Development - localhost",{"type":39,"tag":441,"props":1779,"children":1780},{"style":458},[1781],{"type":45,"value":830},{"type":39,"tag":441,"props":1783,"children":1784},{"style":458},[1785],{"type":45,"value":926},{"type":39,"tag":441,"props":1787,"children":1789},{"class":443,"line":1788},18,[1790,1794,1798,1802,1806,1810,1814,1818,1822,1826,1830,1834],{"type":39,"tag":441,"props":1791,"children":1792},{"style":468},[1793],{"type":45,"value":471},{"type":39,"tag":441,"props":1795,"children":1796},{"style":458},[1797],{"type":45,"value":476},{"type":39,"tag":441,"props":1799,"children":1800},{"style":479},[1801],{"type":45,"value":482},{"type":39,"tag":441,"props":1803,"children":1804},{"style":458},[1805],{"type":45,"value":830},{"type":39,"tag":441,"props":1807,"children":1808},{"style":490},[1809],{"type":45,"value":163},{"type":39,"tag":441,"props":1811,"children":1812},{"style":458},[1813],{"type":45,"value":830},{"type":39,"tag":441,"props":1815,"children":1816},{"style":458},[1817],{"type":45,"value":501},{"type":39,"tag":441,"props":1819,"children":1820},{"style":458},[1821],{"type":45,"value":859},{"type":39,"tag":441,"props":1823,"children":1824},{"style":490},[1825],{"type":45,"value":174},{"type":39,"tag":441,"props":1827,"children":1828},{"style":458},[1829],{"type":45,"value":830},{"type":39,"tag":441,"props":1831,"children":1832},{"style":479},[1833],{"type":45,"value":584},{"type":39,"tag":441,"props":1835,"children":1836},{"style":458},[1837],{"type":45,"value":926},{"type":39,"tag":441,"props":1839,"children":1841},{"class":443,"line":1840},19,[1842,1846,1850,1854,1858,1863,1867,1871,1875,1880,1884],{"type":39,"tag":441,"props":1843,"children":1844},{"style":468},[1845],{"type":45,"value":1537},{"type":39,"tag":441,"props":1847,"children":1848},{"style":458},[1849],{"type":45,"value":476},{"type":39,"tag":441,"props":1851,"children":1852},{"style":479},[1853],{"type":45,"value":482},{"type":39,"tag":441,"props":1855,"children":1856},{"style":458},[1857],{"type":45,"value":830},{"type":39,"tag":441,"props":1859,"children":1860},{"style":490},[1861],{"type":45,"value":1862},"http:\u002F\u002Flocalhost:*",{"type":39,"tag":441,"props":1864,"children":1865},{"style":458},[1866],{"type":45,"value":830},{"type":39,"tag":441,"props":1868,"children":1869},{"style":458},[1870],{"type":45,"value":501},{"type":39,"tag":441,"props":1872,"children":1873},{"style":458},[1874],{"type":45,"value":859},{"type":39,"tag":441,"props":1876,"children":1877},{"style":490},[1878],{"type":45,"value":1879},"http:\u002F\u002F127.0.0.1:*",{"type":39,"tag":441,"props":1881,"children":1882},{"style":458},[1883],{"type":45,"value":830},{"type":39,"tag":441,"props":1885,"children":1886},{"style":479},[1887],{"type":45,"value":968},{"type":39,"tag":441,"props":1889,"children":1891},{"class":443,"line":1890},20,[1892],{"type":39,"tag":441,"props":1893,"children":1894},{"style":458},[1895],{"type":45,"value":598},{"type":39,"tag":54,"props":1897,"children":1899},{"id":1898},"token-storage-and-handling",[1900],{"type":45,"value":1901},"Token Storage and Handling",{"type":39,"tag":61,"props":1903,"children":1905},{"id":1904},"server-side-secret-tokens",[1906],{"type":45,"value":1907},"Server-Side (Secret Tokens)",{"type":39,"tag":48,"props":1909,"children":1910},{},[1911,1912],{"type":45,"value":603},{"type":39,"tag":71,"props":1913,"children":1914},{},[1915],{"type":45,"value":1916},"DO:",{"type":39,"tag":77,"props":1918,"children":1919},{},[1920,1925,1930,1935,1940],{"type":39,"tag":81,"props":1921,"children":1922},{},[1923],{"type":45,"value":1924},"Store in environment variables",{"type":39,"tag":81,"props":1926,"children":1927},{},[1928],{"type":45,"value":1929},"Use secret management services (AWS Secrets Manager, HashiCorp Vault)",{"type":39,"tag":81,"props":1931,"children":1932},{},[1933],{"type":45,"value":1934},"Encrypt at rest",{"type":39,"tag":81,"props":1936,"children":1937},{},[1938],{"type":45,"value":1939},"Limit access via IAM policies",{"type":39,"tag":81,"props":1941,"children":1942},{},[1943],{"type":45,"value":1944},"Log token usage",{"type":39,"tag":48,"props":1946,"children":1947},{},[1948,1949],{"type":45,"value":423},{"type":39,"tag":71,"props":1950,"children":1951},{},[1952],{"type":45,"value":1953},"DON'T:",{"type":39,"tag":77,"props":1955,"children":1956},{},[1957,1962,1967,1972,1977],{"type":39,"tag":81,"props":1958,"children":1959},{},[1960],{"type":45,"value":1961},"Hardcode in source code",{"type":39,"tag":81,"props":1963,"children":1964},{},[1965],{"type":45,"value":1966},"Commit to version control",{"type":39,"tag":81,"props":1968,"children":1969},{},[1970],{"type":45,"value":1971},"Store in plaintext configuration files",{"type":39,"tag":81,"props":1973,"children":1974},{},[1975],{"type":45,"value":1976},"Share via email or Slack",{"type":39,"tag":81,"props":1978,"children":1979},{},[1980],{"type":45,"value":1981},"Reuse across multiple services",{"type":39,"tag":48,"props":1983,"children":1984},{},[1985],{"type":39,"tag":71,"props":1986,"children":1987},{},[1988],{"type":45,"value":1989},"Example: Secure Environment Variable:",{"type":39,"tag":430,"props":1991,"children":1995},{"className":1992,"code":1993,"language":1994,"meta":435,"style":435},"language-bash shiki shiki-themes material-theme-lighter material-theme material-theme-palenight","# .env (NEVER commit this file)\nMAPBOX_SECRET_TOKEN=sk.ey...\n\n# .gitignore (ALWAYS include .env)\n.env\n.env.local\n.env.*.local\n","bash",[1996],{"type":39,"tag":147,"props":1997,"children":1998},{"__ignoreMap":435},[1999,2007,2026,2033,2041,2049,2057],{"type":39,"tag":441,"props":2000,"children":2001},{"class":443,"line":444},[2002],{"type":39,"tag":441,"props":2003,"children":2004},{"style":448},[2005],{"type":45,"value":2006},"# .env (NEVER commit this file)\n",{"type":39,"tag":441,"props":2008,"children":2009},{"class":443,"line":454},[2010,2016,2021],{"type":39,"tag":441,"props":2011,"children":2013},{"style":2012},"--shiki-light:#90A4AE;--shiki-default:#EEFFFF;--shiki-dark:#BABED8",[2014],{"type":45,"value":2015},"MAPBOX_SECRET_TOKEN",{"type":39,"tag":441,"props":2017,"children":2018},{"style":458},[2019],{"type":45,"value":2020},"=",{"type":39,"tag":441,"props":2022,"children":2023},{"style":490},[2024],{"type":45,"value":2025},"sk.ey...\n",{"type":39,"tag":441,"props":2027,"children":2028},{"class":443,"line":464},[2029],{"type":39,"tag":441,"props":2030,"children":2031},{"emptyLinePlaceholder":1591},[2032],{"type":45,"value":1594},{"type":39,"tag":441,"props":2034,"children":2035},{"class":443,"line":592},[2036],{"type":39,"tag":441,"props":2037,"children":2038},{"style":448},[2039],{"type":45,"value":2040},"# .gitignore (ALWAYS include .env)\n",{"type":39,"tag":441,"props":2042,"children":2043},{"class":443,"line":691},[2044],{"type":39,"tag":441,"props":2045,"children":2046},{"style":468},[2047],{"type":45,"value":2048},".env\n",{"type":39,"tag":441,"props":2050,"children":2051},{"class":443,"line":700},[2052],{"type":39,"tag":441,"props":2053,"children":2054},{"style":468},[2055],{"type":45,"value":2056},".env.local\n",{"type":39,"tag":441,"props":2058,"children":2059},{"class":443,"line":708},[2060],{"type":39,"tag":441,"props":2061,"children":2062},{"style":468},[2063],{"type":45,"value":2064},".env.*.local\n",{"type":39,"tag":61,"props":2066,"children":2068},{"id":2067},"client-side-public-tokens",[2069],{"type":45,"value":2070},"Client-Side (Public Tokens)",{"type":39,"tag":48,"props":2072,"children":2073},{},[2074,2075],{"type":45,"value":603},{"type":39,"tag":71,"props":2076,"children":2077},{},[2078],{"type":45,"value":1916},{"type":39,"tag":77,"props":2080,"children":2081},{},[2082,2087,2092,2097,2102],{"type":39,"tag":81,"props":2083,"children":2084},{},[2085],{"type":45,"value":2086},"Use public tokens only",{"type":39,"tag":81,"props":2088,"children":2089},{},[2090],{"type":45,"value":2091},"Apply URL restrictions",{"type":39,"tag":81,"props":2093,"children":2094},{},[2095],{"type":45,"value":2096},"Use different tokens per app",{"type":39,"tag":81,"props":2098,"children":2099},{},[2100],{"type":45,"value":2101},"Rotate periodically",{"type":39,"tag":81,"props":2103,"children":2104},{},[2105],{"type":45,"value":2106},"Monitor usage",{"type":39,"tag":48,"props":2108,"children":2109},{},[2110,2111],{"type":45,"value":423},{"type":39,"tag":71,"props":2112,"children":2113},{},[2114],{"type":45,"value":1953},{"type":39,"tag":77,"props":2116,"children":2117},{},[2118,2123,2128,2133],{"type":39,"tag":81,"props":2119,"children":2120},{},[2121],{"type":45,"value":2122},"Expose secret tokens",{"type":39,"tag":81,"props":2124,"children":2125},{},[2126],{"type":45,"value":2127},"Use tokens without URL restrictions",{"type":39,"tag":81,"props":2129,"children":2130},{},[2131],{"type":45,"value":2132},"Share tokens between unrelated apps",{"type":39,"tag":81,"props":2134,"children":2135},{},[2136],{"type":45,"value":2137},"Use tokens with excessive scopes",{"type":39,"tag":48,"props":2139,"children":2140},{},[2141],{"type":39,"tag":71,"props":2142,"children":2143},{},[2144],{"type":45,"value":2145},"Example: Safe Client Usage (Vite):",{"type":39,"tag":2147,"props":2148,"children":2149},"blockquote",{},[2150],{"type":39,"tag":48,"props":2151,"children":2152},{},[2153,2158,2160,2165,2167,2173,2175,2182,2184,2190,2192,2198,2200,2206],{"type":39,"tag":71,"props":2154,"children":2155},{},[2156],{"type":45,"value":2157},"Note:",{"type":45,"value":2159}," This example uses ",{"type":39,"tag":71,"props":2161,"children":2162},{},[2163],{"type":45,"value":2164},"Vite",{"type":45,"value":2166},". For Next.js, CRA, Angular, or a plain ",{"type":39,"tag":147,"props":2168,"children":2170},{"className":2169},[],[2171],{"type":45,"value":2172},"window.MAPBOX_ACCESS_TOKEN",{"type":45,"value":2174}," \u002F CDN setup, see ",{"type":39,"tag":2176,"props":2177,"children":2179},"a",{"href":2178},"references\u002Ftoken-management.md",[2180],{"type":45,"value":2181},"Token Management",{"type":45,"value":2183},". Do not chain ",{"type":39,"tag":147,"props":2185,"children":2187},{"className":2186},[],[2188],{"type":45,"value":2189},"import.meta.env",{"type":45,"value":2191}," and ",{"type":39,"tag":147,"props":2193,"children":2195},{"className":2194},[],[2196],{"type":45,"value":2197},"process.env",{"type":45,"value":2199}," in one expression — the unused path throws ",{"type":39,"tag":147,"props":2201,"children":2203},{"className":2202},[],[2204],{"type":45,"value":2205},"ReferenceError",{"type":45,"value":2207}," in the browser.",{"type":39,"tag":430,"props":2209,"children":2211},{"className":432,"code":2210,"language":434,"meta":435,"style":435},"\u002F\u002F Public token with URL restrictions - SAFE (Vite)\nconst mapboxToken = import.meta.env.VITE_MAPBOX_ACCESS_TOKEN;\n\n\u002F\u002F Guard BEFORE constructing the map — missing tokens otherwise yield a silent blank map\nif (!mapboxToken || mapboxToken === 'YOUR_MAPBOX_ACCESS_TOKEN') {\n throw new Error('Missing VITE_MAPBOX_ACCESS_TOKEN — set it in env before creating the map');\n}\n\nmapboxgl.accessToken = mapboxToken;\n",[2212],{"type":39,"tag":147,"props":2213,"children":2214},{"__ignoreMap":435},[2215,2223,2278,2285,2293,2352,2398,2405,2412],{"type":39,"tag":441,"props":2216,"children":2217},{"class":443,"line":444},[2218],{"type":39,"tag":441,"props":2219,"children":2220},{"style":448},[2221],{"type":45,"value":2222},"\u002F\u002F Public token with URL restrictions - SAFE (Vite)\n",{"type":39,"tag":441,"props":2224,"children":2225},{"class":443,"line":454},[2226,2231,2236,2240,2246,2251,2256,2260,2265,2269,2274],{"type":39,"tag":441,"props":2227,"children":2228},{"style":822},[2229],{"type":45,"value":2230},"const",{"type":39,"tag":441,"props":2232,"children":2233},{"style":2012},[2234],{"type":45,"value":2235}," mapboxToken ",{"type":39,"tag":441,"props":2237,"children":2238},{"style":458},[2239],{"type":45,"value":2020},{"type":39,"tag":441,"props":2241,"children":2243},{"style":2242},"--shiki-light:#39ADB5;--shiki-light-font-style:italic;--shiki-default:#89DDFF;--shiki-default-font-style:italic;--shiki-dark:#89DDFF;--shiki-dark-font-style:italic",[2244],{"type":45,"value":2245}," import",{"type":39,"tag":441,"props":2247,"children":2248},{"style":458},[2249],{"type":45,"value":2250},".",{"type":39,"tag":441,"props":2252,"children":2253},{"style":2012},[2254],{"type":45,"value":2255},"meta",{"type":39,"tag":441,"props":2257,"children":2258},{"style":458},[2259],{"type":45,"value":2250},{"type":39,"tag":441,"props":2261,"children":2262},{"style":2012},[2263],{"type":45,"value":2264},"env",{"type":39,"tag":441,"props":2266,"children":2267},{"style":458},[2268],{"type":45,"value":2250},{"type":39,"tag":441,"props":2270,"children":2271},{"style":2012},[2272],{"type":45,"value":2273},"VITE_MAPBOX_ACCESS_TOKEN",{"type":39,"tag":441,"props":2275,"children":2276},{"style":458},[2277],{"type":45,"value":589},{"type":39,"tag":441,"props":2279,"children":2280},{"class":443,"line":464},[2281],{"type":39,"tag":441,"props":2282,"children":2283},{"emptyLinePlaceholder":1591},[2284],{"type":45,"value":1594},{"type":39,"tag":441,"props":2286,"children":2287},{"class":443,"line":592},[2288],{"type":39,"tag":441,"props":2289,"children":2290},{"style":448},[2291],{"type":45,"value":2292},"\u002F\u002F Guard BEFORE constructing the map — missing tokens otherwise yield a silent blank map\n",{"type":39,"tag":441,"props":2294,"children":2295},{"class":443,"line":691},[2296,2301,2306,2311,2316,2321,2325,2330,2334,2339,2343,2348],{"type":39,"tag":441,"props":2297,"children":2298},{"style":2242},[2299],{"type":45,"value":2300},"if",{"type":39,"tag":441,"props":2302,"children":2303},{"style":2012},[2304],{"type":45,"value":2305}," (",{"type":39,"tag":441,"props":2307,"children":2308},{"style":458},[2309],{"type":45,"value":2310},"!",{"type":39,"tag":441,"props":2312,"children":2313},{"style":2012},[2314],{"type":45,"value":2315},"mapboxToken ",{"type":39,"tag":441,"props":2317,"children":2318},{"style":458},[2319],{"type":45,"value":2320},"||",{"type":39,"tag":441,"props":2322,"children":2323},{"style":2012},[2324],{"type":45,"value":2235},{"type":39,"tag":441,"props":2326,"children":2327},{"style":458},[2328],{"type":45,"value":2329},"===",{"type":39,"tag":441,"props":2331,"children":2332},{"style":458},[2333],{"type":45,"value":506},{"type":39,"tag":441,"props":2335,"children":2336},{"style":490},[2337],{"type":45,"value":2338},"YOUR_MAPBOX_ACCESS_TOKEN",{"type":39,"tag":441,"props":2340,"children":2341},{"style":458},[2342],{"type":45,"value":487},{"type":39,"tag":441,"props":2344,"children":2345},{"style":2012},[2346],{"type":45,"value":2347},") ",{"type":39,"tag":441,"props":2349,"children":2350},{"style":458},[2351],{"type":45,"value":461},{"type":39,"tag":441,"props":2353,"children":2354},{"class":443,"line":700},[2355,2360,2365,2371,2376,2380,2385,2389,2394],{"type":39,"tag":441,"props":2356,"children":2357},{"style":2242},[2358],{"type":45,"value":2359}," throw",{"type":39,"tag":441,"props":2361,"children":2362},{"style":458},[2363],{"type":45,"value":2364}," new",{"type":39,"tag":441,"props":2366,"children":2368},{"style":2367},"--shiki-light:#6182B8;--shiki-default:#82AAFF;--shiki-dark:#82AAFF",[2369],{"type":45,"value":2370}," Error",{"type":39,"tag":441,"props":2372,"children":2373},{"style":479},[2374],{"type":45,"value":2375},"(",{"type":39,"tag":441,"props":2377,"children":2378},{"style":458},[2379],{"type":45,"value":487},{"type":39,"tag":441,"props":2381,"children":2382},{"style":490},[2383],{"type":45,"value":2384},"Missing VITE_MAPBOX_ACCESS_TOKEN — set it in env before creating the map",{"type":39,"tag":441,"props":2386,"children":2387},{"style":458},[2388],{"type":45,"value":487},{"type":39,"tag":441,"props":2390,"children":2391},{"style":479},[2392],{"type":45,"value":2393},")",{"type":39,"tag":441,"props":2395,"children":2396},{"style":458},[2397],{"type":45,"value":589},{"type":39,"tag":441,"props":2399,"children":2400},{"class":443,"line":708},[2401],{"type":39,"tag":441,"props":2402,"children":2403},{"style":458},[2404],{"type":45,"value":598},{"type":39,"tag":441,"props":2406,"children":2407},{"class":443,"line":776},[2408],{"type":39,"tag":441,"props":2409,"children":2410},{"emptyLinePlaceholder":1591},[2411],{"type":45,"value":1594},{"type":39,"tag":441,"props":2413,"children":2414},{"class":443,"line":1605},[2415,2420,2424,2429,2433,2438],{"type":39,"tag":441,"props":2416,"children":2417},{"style":2012},[2418],{"type":45,"value":2419},"mapboxgl",{"type":39,"tag":441,"props":2421,"children":2422},{"style":458},[2423],{"type":45,"value":2250},{"type":39,"tag":441,"props":2425,"children":2426},{"style":2012},[2427],{"type":45,"value":2428},"accessToken ",{"type":39,"tag":441,"props":2430,"children":2431},{"style":458},[2432],{"type":45,"value":2020},{"type":39,"tag":441,"props":2434,"children":2435},{"style":2012},[2436],{"type":45,"value":2437}," mapboxToken",{"type":39,"tag":441,"props":2439,"children":2440},{"style":458},[2441],{"type":45,"value":589},{"type":39,"tag":61,"props":2443,"children":2445},{"id":2444},"agent-anti-pattern-skip-the-token-guard",[2446],{"type":45,"value":2447},"Agent anti-pattern: skip the token guard",{"type":39,"tag":48,"props":2449,"children":2450},{},[2451,2453,2459,2461,2467],{"type":45,"value":2452},"Agents often assign ",{"type":39,"tag":147,"props":2454,"children":2456},{"className":2455},[],[2457],{"type":45,"value":2458},"mapboxgl.accessToken",{"type":45,"value":2460}," and call ",{"type":39,"tag":147,"props":2462,"children":2464},{"className":2463},[],[2465],{"type":45,"value":2466},"new mapboxgl.Map(...)",{"type":45,"value":2468}," with no check. That fails closed as a blank canvas with no UI error.",{"type":39,"tag":48,"props":2470,"children":2471},{},[2472],{"type":39,"tag":71,"props":2473,"children":2474},{},[2475],{"type":45,"value":2476},"Always:",{"type":39,"tag":2478,"props":2479,"children":2480},"ol",{},[2481,2494,2499],{"type":39,"tag":81,"props":2482,"children":2483},{},[2484,2486,2492],{"type":45,"value":2485},"Resolve the token from the env pattern for your bundler (never hardcode a real ",{"type":39,"tag":147,"props":2487,"children":2489},{"className":2488},[],[2490],{"type":45,"value":2491},"pk.",{"type":45,"value":2493}," in source)",{"type":39,"tag":81,"props":2495,"children":2496},{},[2497],{"type":45,"value":2498},"Validate it is present and not a placeholder",{"type":39,"tag":81,"props":2500,"children":2501},{},[2502,2504,2510],{"type":45,"value":2503},"Only then set ",{"type":39,"tag":147,"props":2505,"children":2507},{"className":2506},[],[2508],{"type":45,"value":2509},"accessToken",{"type":45,"value":2511}," and construct the map",{"type":39,"tag":54,"props":2513,"children":2515},{"id":2514},"security-checklist",[2516],{"type":45,"value":2517},"Security Checklist",{"type":39,"tag":48,"props":2519,"children":2520},{},[2521],{"type":39,"tag":71,"props":2522,"children":2523},{},[2524],{"type":45,"value":2525},"Token Creation:",{"type":39,"tag":77,"props":2527,"children":2530},{"className":2528},[2529],"contains-task-list",[2531,2543,2552,2561,2570],{"type":39,"tag":81,"props":2532,"children":2535},{"className":2533},[2534],"task-list-item",[2536,2541],{"type":39,"tag":2537,"props":2538,"children":2540},"input",{"disabled":1591,"type":2539},"checkbox",[],{"type":45,"value":2542}," Use public tokens for client-side, secret for server-side",{"type":39,"tag":81,"props":2544,"children":2546},{"className":2545},[2534],[2547,2550],{"type":39,"tag":2537,"props":2548,"children":2549},{"disabled":1591,"type":2539},[],{"type":45,"value":2551}," Apply principle of least privilege for scopes",{"type":39,"tag":81,"props":2553,"children":2555},{"className":2554},[2534],[2556,2559],{"type":39,"tag":2537,"props":2557,"children":2558},{"disabled":1591,"type":2539},[],{"type":45,"value":2560}," Add URL restrictions to public tokens",{"type":39,"tag":81,"props":2562,"children":2564},{"className":2563},[2534],[2565,2568],{"type":39,"tag":2537,"props":2566,"children":2567},{"disabled":1591,"type":2539},[],{"type":45,"value":2569}," Use descriptive names\u002Fnotes for token identification",{"type":39,"tag":81,"props":2571,"children":2573},{"className":2572},[2534],[2574,2577],{"type":39,"tag":2537,"props":2575,"children":2576},{"disabled":1591,"type":2539},[],{"type":45,"value":2578}," Document intended use and environment",{"type":39,"tag":48,"props":2580,"children":2581},{},[2582],{"type":39,"tag":71,"props":2583,"children":2584},{},[2585],{"type":45,"value":2586},"Token Management:",{"type":39,"tag":77,"props":2588,"children":2590},{"className":2589},[2529],[2591,2600,2609,2618,2627,2636],{"type":39,"tag":81,"props":2592,"children":2594},{"className":2593},[2534],[2595,2598],{"type":39,"tag":2537,"props":2596,"children":2597},{"disabled":1591,"type":2539},[],{"type":45,"value":2599}," Store secret tokens in environment variables or secret managers",{"type":39,"tag":81,"props":2601,"children":2603},{"className":2602},[2534],[2604,2607],{"type":39,"tag":2537,"props":2605,"children":2606},{"disabled":1591,"type":2539},[],{"type":45,"value":2608}," Never commit tokens to version control",{"type":39,"tag":81,"props":2610,"children":2612},{"className":2611},[2534],[2613,2616],{"type":39,"tag":2537,"props":2614,"children":2615},{"disabled":1591,"type":2539},[],{"type":45,"value":2617}," Rotate tokens every 90 days (or per policy)",{"type":39,"tag":81,"props":2619,"children":2621},{"className":2620},[2534],[2622,2625],{"type":39,"tag":2537,"props":2623,"children":2624},{"disabled":1591,"type":2539},[],{"type":45,"value":2626}," Remove unused tokens promptly",{"type":39,"tag":81,"props":2628,"children":2630},{"className":2629},[2534],[2631,2634],{"type":39,"tag":2537,"props":2632,"children":2633},{"disabled":1591,"type":2539},[],{"type":45,"value":2635}," Separate tokens by environment (dev\u002Fstaging\u002Fprod)",{"type":39,"tag":81,"props":2637,"children":2639},{"className":2638},[2534],[2640,2643,2645],{"type":39,"tag":2537,"props":2641,"children":2642},{"disabled":1591,"type":2539},[],{"type":45,"value":2644}," Guard missing tokens in client code before ",{"type":39,"tag":147,"props":2646,"children":2648},{"className":2647},[],[2649],{"type":45,"value":2650},"new mapboxgl.Map",{"type":39,"tag":48,"props":2652,"children":2653},{},[2654],{"type":39,"tag":71,"props":2655,"children":2656},{},[2657],{"type":45,"value":2658},"Monitoring:",{"type":39,"tag":77,"props":2660,"children":2662},{"className":2661},[2529],[2663,2672,2681,2690,2699],{"type":39,"tag":81,"props":2664,"children":2666},{"className":2665},[2534],[2667,2670],{"type":39,"tag":2537,"props":2668,"children":2669},{"disabled":1591,"type":2539},[],{"type":45,"value":2671}," Track token usage patterns",{"type":39,"tag":81,"props":2673,"children":2675},{"className":2674},[2534],[2676,2679],{"type":39,"tag":2537,"props":2677,"children":2678},{"disabled":1591,"type":2539},[],{"type":45,"value":2680}," Set up alerts for unusual activity",{"type":39,"tag":81,"props":2682,"children":2684},{"className":2683},[2534],[2685,2688],{"type":39,"tag":2537,"props":2686,"children":2687},{"disabled":1591,"type":2539},[],{"type":45,"value":2689}," Regular security audits (monthly)",{"type":39,"tag":81,"props":2691,"children":2693},{"className":2692},[2534],[2694,2697],{"type":39,"tag":2537,"props":2695,"children":2696},{"disabled":1591,"type":2539},[],{"type":45,"value":2698}," Review team access quarterly",{"type":39,"tag":81,"props":2700,"children":2702},{"className":2701},[2534],[2703,2706],{"type":39,"tag":2537,"props":2704,"children":2705},{"disabled":1591,"type":2539},[],{"type":45,"value":2707}," Scan repositories for exposed tokens",{"type":39,"tag":48,"props":2709,"children":2710},{},[2711],{"type":39,"tag":71,"props":2712,"children":2713},{},[2714],{"type":45,"value":2715},"Incident Response:",{"type":39,"tag":77,"props":2717,"children":2719},{"className":2718},[2529],[2720,2729,2738,2747,2756],{"type":39,"tag":81,"props":2721,"children":2723},{"className":2722},[2534],[2724,2727],{"type":39,"tag":2537,"props":2725,"children":2726},{"disabled":1591,"type":2539},[],{"type":45,"value":2728}," Documented revocation procedure",{"type":39,"tag":81,"props":2730,"children":2732},{"className":2731},[2534],[2733,2736],{"type":39,"tag":2537,"props":2734,"children":2735},{"disabled":1591,"type":2539},[],{"type":45,"value":2737}," Emergency contact list",{"type":39,"tag":81,"props":2739,"children":2741},{"className":2740},[2534],[2742,2745],{"type":39,"tag":2537,"props":2743,"children":2744},{"disabled":1591,"type":2539},[],{"type":45,"value":2746}," Rotation process documented",{"type":39,"tag":81,"props":2748,"children":2750},{"className":2749},[2534],[2751,2754],{"type":39,"tag":2537,"props":2752,"children":2753},{"disabled":1591,"type":2539},[],{"type":45,"value":2755}," Post-incident review template",{"type":39,"tag":81,"props":2757,"children":2759},{"className":2758},[2534],[2760,2763],{"type":39,"tag":2537,"props":2761,"children":2762},{"disabled":1591,"type":2539},[],{"type":45,"value":2764}," Team training on security procedures",{"type":39,"tag":54,"props":2766,"children":2768},{"id":2767},"reference-files",[2769],{"type":45,"value":2770},"Reference Files",{"type":39,"tag":48,"props":2772,"children":2773},{},[2774],{"type":45,"value":2775},"For detailed guidance on specific topics, load these references as needed:",{"type":39,"tag":77,"props":2777,"children":2778},{},[2779,2792,2806],{"type":39,"tag":81,"props":2780,"children":2781},{},[2782,2790],{"type":39,"tag":71,"props":2783,"children":2784},{},[2785],{"type":39,"tag":147,"props":2786,"children":2788},{"className":2787},[],[2789],{"type":45,"value":2178},{"type":45,"value":2791}," — Bundler-specific env var names and access patterns (Vite \u002F Next \u002F CRA \u002F Angular \u002F CDN). Load when: wiring tokens in a different framework than the Vite example above.",{"type":39,"tag":81,"props":2793,"children":2794},{},[2795,2804],{"type":39,"tag":71,"props":2796,"children":2797},{},[2798],{"type":39,"tag":147,"props":2799,"children":2801},{"className":2800},[],[2802],{"type":45,"value":2803},"references\u002Frotation-monitoring.md",{"type":45,"value":2805}," — Token rotation strategies (zero-downtime + emergency), monitoring metrics, alerting rules, and monthly\u002Fquarterly audit checklists. Load when: implementing rotation, setting up monitoring, or conducting audits.",{"type":39,"tag":81,"props":2807,"children":2808},{},[2809,2818],{"type":39,"tag":71,"props":2810,"children":2811},{},[2812],{"type":39,"tag":147,"props":2813,"children":2815},{"className":2814},[],[2816],{"type":45,"value":2817},"references\u002Fincident-response.md",{"type":45,"value":2819}," — Step-by-step incident response plan and common security mistakes with code examples. Load when: responding to a token compromise, reviewing code for security issues, or training on anti-patterns.",{"type":39,"tag":54,"props":2821,"children":2823},{"id":2822},"when-to-use-this-skill",[2824],{"type":45,"value":2825},"When to Use This Skill",{"type":39,"tag":48,"props":2827,"children":2828},{},[2829],{"type":45,"value":2830},"Invoke this skill when:",{"type":39,"tag":77,"props":2832,"children":2833},{},[2834,2839,2844,2849,2854,2859,2864,2869],{"type":39,"tag":81,"props":2835,"children":2836},{},[2837],{"type":45,"value":2838},"Creating new tokens",{"type":39,"tag":81,"props":2840,"children":2841},{},[2842],{"type":45,"value":2843},"Deciding between public vs secret tokens",{"type":39,"tag":81,"props":2845,"children":2846},{},[2847],{"type":45,"value":2848},"Setting up token restrictions",{"type":39,"tag":81,"props":2850,"children":2851},{},[2852],{"type":45,"value":2853},"Implementing token rotation",{"type":39,"tag":81,"props":2855,"children":2856},{},[2857],{"type":45,"value":2858},"Investigating security incidents",{"type":39,"tag":81,"props":2860,"children":2861},{},[2862],{"type":45,"value":2863},"Conducting security audits",{"type":39,"tag":81,"props":2865,"children":2866},{},[2867],{"type":45,"value":2868},"Training team on token security",{"type":39,"tag":81,"props":2870,"children":2871},{},[2872],{"type":45,"value":2873},"Reviewing code for token exposure",{"type":39,"tag":2875,"props":2876,"children":2877},"style",{},[2878],{"type":45,"value":2879},"html .light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html.light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html .default .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html.dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}",{"items":2881,"total":1840},[2882,2896,2913,2928,2950,2962,2976,2989,3003,3016,3031,3043],{"slug":2883,"name":2883,"fn":2884,"description":2885,"org":2886,"tags":2887,"stars":23,"repoUrl":24,"updatedAt":2895},"mapbox-android-patterns","integrate Mapbox Maps SDK on Android","Official integration patterns for Mapbox Maps SDK on Android. Covers installation, adding markers, user location, custom data, styles, camera control, and featureset interactions. Based on official Mapbox documentation.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[2888,2891,2892],{"name":2889,"slug":2890,"type":15},"Android","android",{"name":9,"slug":8,"type":15},{"name":2893,"slug":2894,"type":15},"Mobile","mobile","2026-07-30T05:30:51.739352",{"slug":2897,"name":2897,"fn":2898,"description":2899,"org":2900,"tags":2901,"stars":23,"repoUrl":24,"updatedAt":2912},"mapbox-cartography","apply cartographic design principles to Mapbox","Expert guidance on map design principles, color theory, visual hierarchy, typography, and cartographic best practices for creating effective and beautiful maps with Mapbox. Use when designing map styles, choosing colors, or making cartographic decisions.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[2902,2905,2908,2909],{"name":2903,"slug":2904,"type":15},"Branding","branding",{"name":2906,"slug":2907,"type":15},"Design","design",{"name":9,"slug":8,"type":15},{"name":2910,"slug":2911,"type":15},"Typography","typography","2026-04-06T18:28:41.2556",{"slug":2914,"name":2914,"fn":2915,"description":2916,"org":2917,"tags":2918,"stars":23,"repoUrl":24,"updatedAt":2927},"mapbox-data-visualization-patterns","implement Mapbox data visualization patterns","Patterns for visualizing data on maps including choropleth maps, heat maps, 3D visualizations, data-driven styling, and animated data. Covers layer types, color scales, and performance optimization.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[2919,2922,2923,2924],{"name":2920,"slug":2921,"type":15},"Data Visualization","data-visualization",{"name":2906,"slug":2907,"type":15},{"name":9,"slug":8,"type":15},{"name":2925,"slug":2926,"type":15},"Performance","performance","2026-04-06T18:29:02.907655",{"slug":2929,"name":2929,"fn":2930,"description":2931,"org":2932,"tags":2933,"stars":23,"repoUrl":24,"updatedAt":2949},"mapbox-flutter-patterns","integrate Mapbox maps into Flutter applications","Official integration patterns for the Mapbox Maps Flutter SDK. Covers installation, iOS\u002FAndroid platform setup, access token configuration, MapWidget initialization, camera control, annotations with tap handling, user location, and loading GeoJSON. Based on official Mapbox documentation.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[2934,2935,2938,2941,2944,2945,2946],{"name":2889,"slug":2890,"type":15},{"name":2936,"slug":2937,"type":15},"Dart","dart",{"name":2939,"slug":2940,"type":15},"Flutter","flutter",{"name":2942,"slug":2943,"type":15},"iOS","ios",{"name":9,"slug":8,"type":15},{"name":2893,"slug":2894,"type":15},{"name":2947,"slug":2948,"type":15},"SDK","sdk","2026-05-12T06:03:11.211517",{"slug":2951,"name":2951,"fn":2952,"description":2953,"org":2954,"tags":2955,"stars":23,"repoUrl":24,"updatedAt":2961},"mapbox-geospatial-operations","select geospatial tools for Mapbox operations","Expert guidance on choosing the right geospatial tool based on problem type, accuracy requirements, and performance needs",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[2956,2957,2958],{"name":9,"slug":8,"type":15},{"name":2925,"slug":2926,"type":15},{"name":2959,"slug":2960,"type":15},"Strategy","strategy","2026-07-30T05:30:52.766227",{"slug":2963,"name":2963,"fn":2964,"description":2965,"org":2966,"tags":2967,"stars":23,"repoUrl":24,"updatedAt":2975},"mapbox-google-maps-migration","migrate from Google Maps to Mapbox","Migration guide for developers moving from Google Maps Platform to Mapbox GL JS, covering API equivalents, pattern translations, and key differences",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[2968,2969,2972],{"name":9,"slug":8,"type":15},{"name":2970,"slug":2971,"type":15},"Migration","migration",{"name":2973,"slug":2974,"type":15},"Web Development","web-development","2026-04-06T18:28:56.459496",{"slug":2977,"name":2977,"fn":2978,"description":2979,"org":2980,"tags":2981,"stars":23,"repoUrl":24,"updatedAt":2988},"mapbox-ios-patterns","integrate Mapbox Maps SDK on iOS","Official integration patterns for Mapbox Maps SDK on iOS. Covers installation, adding markers, user location, custom data, styles, camera control, and featureset interactions. Based on official Mapbox documentation.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[2982,2983,2984,2985],{"name":2942,"slug":2943,"type":15},{"name":9,"slug":8,"type":15},{"name":2893,"slug":2894,"type":15},{"name":2986,"slug":2987,"type":15},"Swift","swift","2026-07-30T05:30:54.75526",{"slug":2990,"name":2990,"fn":2991,"description":2992,"org":2993,"tags":2994,"stars":23,"repoUrl":24,"updatedAt":3002},"mapbox-location-grounding","generate grounded location-aware responses with Mapbox","Compose Mapbox MCP tools to produce grounded, cited location-aware responses from live data instead of training data",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[2995,2998,2999],{"name":2996,"slug":2997,"type":15},"Data Quality","data-quality",{"name":9,"slug":8,"type":15},{"name":3000,"slug":3001,"type":15},"MCP","mcp","2026-04-15T05:01:44.248764",{"slug":3004,"name":3004,"fn":3005,"description":3006,"org":3007,"tags":3008,"stars":23,"repoUrl":24,"updatedAt":3015},"mapbox-maplibre-migration","migrate from MapLibre to Mapbox","Guide for migrating from MapLibre GL JS to Mapbox GL JS, covering API compatibility, token setup, style configuration, and the benefits of Mapbox's official support and ecosystem",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[3009,3012,3013,3014],{"name":3010,"slug":3011,"type":15},"Engineering","engineering",{"name":9,"slug":8,"type":15},{"name":2970,"slug":2971,"type":15},{"name":2973,"slug":2974,"type":15},"2026-04-06T18:28:51.531856",{"slug":3017,"name":3017,"fn":3018,"description":3019,"org":3020,"tags":3021,"stars":23,"repoUrl":24,"updatedAt":3030},"mapbox-mcp-devkit-patterns","integrate Mapbox MCP DevKit in coding assistants","Integration patterns for Mapbox MCP DevKit Server in AI coding assistants. Covers setup, style management, token management, validation workflows, and documentation access through MCP. Use when building Mapbox applications with AI coding assistance.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[3022,3025,3028,3029],{"name":3023,"slug":3024,"type":15},"Documentation","documentation",{"name":3026,"slug":3027,"type":15},"Local Development","local-development",{"name":9,"slug":8,"type":15},{"name":3000,"slug":3001,"type":15},"2026-04-06T18:28:53.790961",{"slug":3032,"name":3032,"fn":3033,"description":3034,"org":3035,"tags":3036,"stars":23,"repoUrl":24,"updatedAt":3042},"mapbox-mcp-runtime-patterns","integrate Mapbox MCP Server in AI apps","Integration patterns for Mapbox MCP Server in AI applications and agent frameworks. Covers runtime integration with pydantic-ai, mastra, LangChain, and custom agents. Use when building AI-powered applications that need geospatial capabilities.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[3037,3040,3041],{"name":3038,"slug":3039,"type":15},"Architecture","architecture",{"name":9,"slug":8,"type":15},{"name":3000,"slug":3001,"type":15},"2026-04-06T18:28:55.164842",{"slug":3044,"name":3044,"fn":3045,"description":3046,"org":3047,"tags":3048,"stars":23,"repoUrl":24,"updatedAt":3056},"mapbox-search-integration","implement Mapbox search in applications","Complete workflow for implementing Mapbox search in applications - from discovery questions to production-ready integration with best practices",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[3049,3052,3053],{"name":3050,"slug":3051,"type":15},"API Development","api-development",{"name":9,"slug":8,"type":15},{"name":3054,"slug":3055,"type":15},"Search","search","2026-04-06T18:28:50.264933",{"items":3058,"total":1840},[3059,3065,3072,3079,3089,3095,3101],{"slug":2883,"name":2883,"fn":2884,"description":2885,"org":3060,"tags":3061,"stars":23,"repoUrl":24,"updatedAt":2895},{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[3062,3063,3064],{"name":2889,"slug":2890,"type":15},{"name":9,"slug":8,"type":15},{"name":2893,"slug":2894,"type":15},{"slug":2897,"name":2897,"fn":2898,"description":2899,"org":3066,"tags":3067,"stars":23,"repoUrl":24,"updatedAt":2912},{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[3068,3069,3070,3071],{"name":2903,"slug":2904,"type":15},{"name":2906,"slug":2907,"type":15},{"name":9,"slug":8,"type":15},{"name":2910,"slug":2911,"type":15},{"slug":2914,"name":2914,"fn":2915,"description":2916,"org":3073,"tags":3074,"stars":23,"repoUrl":24,"updatedAt":2927},{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[3075,3076,3077,3078],{"name":2920,"slug":2921,"type":15},{"name":2906,"slug":2907,"type":15},{"name":9,"slug":8,"type":15},{"name":2925,"slug":2926,"type":15},{"slug":2929,"name":2929,"fn":2930,"description":2931,"org":3080,"tags":3081,"stars":23,"repoUrl":24,"updatedAt":2949},{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[3082,3083,3084,3085,3086,3087,3088],{"name":2889,"slug":2890,"type":15},{"name":2936,"slug":2937,"type":15},{"name":2939,"slug":2940,"type":15},{"name":2942,"slug":2943,"type":15},{"name":9,"slug":8,"type":15},{"name":2893,"slug":2894,"type":15},{"name":2947,"slug":2948,"type":15},{"slug":2951,"name":2951,"fn":2952,"description":2953,"org":3090,"tags":3091,"stars":23,"repoUrl":24,"updatedAt":2961},{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[3092,3093,3094],{"name":9,"slug":8,"type":15},{"name":2925,"slug":2926,"type":15},{"name":2959,"slug":2960,"type":15},{"slug":2963,"name":2963,"fn":2964,"description":2965,"org":3096,"tags":3097,"stars":23,"repoUrl":24,"updatedAt":2975},{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[3098,3099,3100],{"name":9,"slug":8,"type":15},{"name":2970,"slug":2971,"type":15},{"name":2973,"slug":2974,"type":15},{"slug":2977,"name":2977,"fn":2978,"description":2979,"org":3102,"tags":3103,"stars":23,"repoUrl":24,"updatedAt":2988},{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[3104,3105,3106,3107],{"name":2942,"slug":2943,"type":15},{"name":9,"slug":8,"type":15},{"name":2893,"slug":2894,"type":15},{"name":2986,"slug":2987,"type":15}]