Speak Security Basics
Overview
Security best practices for Speak API keys, user data, and audio content in language learning applications.
Prerequisites
- Speak SDK installed
- Understanding of environment variables
- Access to Speak dashboard
- Knowledge of audio privacy concerns
Instructions
- Security Checklist
For full implementation details, load: Read(${CLAUDE_SKILL_DIR}/references/implementation-guide.md)
Output
- Secure API key storage
- Environment-specific access controls
- Audio privacy protection
- Webhook security enabled
- User data protection compliance
Error Handling
| Security Issue | Detection | Mitigation |
|---|---|---|
| Exposed API key | Git scanning, audit logs | Rotate immediately |
| Excessive scopes | Audit logs review | Reduce permissions |
| Missing rotation | Key age check | Schedule rotation |
| Audio leak | Access logs | Encrypt and restrict |
| Missing consent | Compliance audit | Update consent flow |
Examples
Service Account Pattern
const clients = {
lessons: new SpeakClient({
apiKey: process.env.SPEAK_LESSON_KEY,
appId: process.env.SPEAK_APP_ID,
}),
speech: new SpeakClient({
apiKey: process.env.SPEAK_SPEECH_KEY,
appId: process.env.SPEAK_APP_ID,
}),
};
Resources
Next Steps
For production deployment, see speak-prod-checklist.