A little perspective
goes a long way.

Use a Mapbox public token starting with pk.. The map and place searches use your Mapbox account.

For a public site, set mapboxPublicToken in config.js and restrict that token to your website’s URLs. Never use an sk. secret token.