It is mentioned here: developer.bambora.com/europe/shopping-carts/shopping-carts/magento2#mandatory-configurations
A post was split to a new topic: [Bambora] How is «Secret Token» used?
It is in the «Security/Authentication» block:
See also: [Bambora] How is «Secret Token» used?