In their client-side code, they provide a worked example of how to use their API. That's hardly the way to keep a secret.