Open the relevant web stream in GA4 Admin to find it. Distinguish it from a property ID or an app-stream identifier and use the correct destination in the Google tag.
The measurement ID is visible in the browser. A Measurement Protocol API secret is a separate server secret; configuring it or ordinary data filters does not guarantee protection against every unwanted browser submission.