Getting started
What is bubbleio.wtf?
An introduction to the bubbleio.wtf exposed-key scanner, Bubble tools, and documentation.
bubbleio.wtf is a toolset and library for teams whose Bubble apps have outgrown Bubble. It exists at the intersection of two hard, related problems:
- Leaked API keys. Bubble ships configuration into the browser, and it is easy to accidentally publish provider credentials with it. bubbleio.wtf scans public Bubble app bundles for exposed keys so you can find and fix them before someone else does.
- The migration problem. A Bubble app that has become the company operating system is hard to move to real code. The blog and migration assessment help you understand when and how to make that move without losing product momentum.
What you’ll find here
- The scanner detects exposed-key patterns in public Bubble app assets.
- Tools include the Bubble DBML generator and project browser.
- This docs section explains the scanner, tools, JSON API, and maintained Bubble plugins.
- The blog covers Bubble technical debt, architecture, and migration strategy.
Plugin docs
The Modern Dropdown documentation covers option JSON, single and multiple selection, placement, Bubble states, events, actions, browser support, and current limits. Documentation for other plugins will be added as their public contracts settle.