Tools for Airtable Development
Here's exactly where your access token and schema travel when you use AirMap — and the one place they never go: our servers.
Your token and base structure move along this path only.
You paste a read-only access token straight into the page.
Everything runs on your device. The token is saved only there.
It fetches just your base's structure — table and field names, not your records.
If you ask for analysis, your browser sends the schema straight to Google Gemini with your own key.
The complete list of what our servers ever see.
Your email address, so you can log back in.
Whether your subscription is active — handled by Stripe.
Your Airtable token and your base data never reach our servers — there's nothing for us to leak, sell, or lose.
The precise mechanics, for anyone who'd rather verify than take it on faith. Every request below is one you can watch fire in your browser's network tab — and none of them route through us.
https://api.airtable.com/v0/meta/bases/{baseId}/tablesSends your PAT as a Bearer token and returns table, field, and relationship structure. This is the Meta API — it never returns record or cell data.
https://generativelanguage.googleapis.com/v1beta/models/gemini-2.0-flash:generateContentoptionalOnly fires if you run an analysis. The @google/generative-ai SDK sends the schema JSON and your prompt, authenticated with your own Gemini key.
Kept in localStorage on this origin. One click clears every key below.
patbaseIdairtableSchemageminiApiKeygeminiPromptThe whole server-side footprint — no token, no schema, no records.
Your email and a session cookie, so you can sign back in.
Whether your plan is active. Card details live with Stripe, never us.
No third-party analytics or tracking scripts run on the tool itself.
Scope your token down. Anything in localStorage is readable by scripts on this page, so treat your PAT like a password: issue a read-only token limited to the schema.bases:read scope on just the base you're mapping, and clear it when you're done on a shared machine.
Open your browser's dev tools, switch to the Network tab, and use AirMap. You'll see requests to api.airtable.com and, if you run analysis, generativelanguage.googleapis.com — and never one that ships your token or schema to an AirMap domain.