| name | framer-security-basics |
| description | Apply Framer security best practices for secrets and access control.
Use when securing API keys, implementing least privilege access,
or auditing Framer security configuration.
Trigger with phrases like "framer security", "framer secrets",
"secure framer", "framer API key security".
|
| allowed-tools | Read, Write, Grep |
| version | 1.5.0 |
| license | MIT |
| author | Jeremy Longshore <jeremy@intentsolutions.io> |
| tags | ["saas","framer"] |
| compatibility | Designed for Claude Code |
Framer Security Basics
Overview
Security best practices for Framer API keys, plugin development, and Server API access.
Instructions
Step 1: Credential Management
| Credential | Scope | Where to Store |
|---|
Server API Key (framer_sk_*) | Per-site | Secrets vault |
| Site ID | Per-site | Can be in config |
| Plugin auth tokens | Per-user session | Never persist |
FRAMER_API_KEY=framer_sk_abc123...
FRAMER_SITE_ID=abc123
.env
.env.local
Step 2: Plugin Security
const data = await fetch('https://your-api.com/framer-data', {
headers: { 'Authorization': `Bearer ${sessionToken}` },
});
Step 3: Server API Key Rotation
node -e "
const { framer } = require('framer-api');
framer.connect({ apiKey: process.env.FRAMER_API_KEY, siteId: process.env.FRAMER_SITE_ID })
.then(() => console.log('OK'))
.catch(e => console.error('FAIL', e.message));
"
Step 4: Security Checklist
Resources
Next Steps
For production deployment, see framer-prod-checklist.
