Yes, public key is made to be used publicly, but you can add URL restrictions to ensure that no one makes api call with it on your behalf Create an access token | Help | Mapbox
Yes, public key is made to be used publicly, but you can add URL restrictions to ensure that no one makes api call with it on your behalf Create an access token | Help | Mapbox