...
In the Android project, create the xml directory (/app/src/main/res/xml) if it does not exist. Then, copy the mobileprotect.xml config file into the xml resources folder.
That XML contains an AUTH_TOKEN key, that key is only used to identify the data sent by Mobile Protect and can’t be used to pull any data from the app nor the backend. It is safe to commit and have in the apk.
Step 5: Start Mobile Protect
...