Security
How We Secure Things
- API Keys - Keep them secret
- Proxy Pattern - Credentials stay server-side
- HTTPS - Encrypted connections
- Token Auth - Bearer tokens for API calls
For Developers
- Store credentials in
.env.local - Never expose API keys to client
- Use the proxy route
/api/[...slug] - Tokens auto-renew on 401 errors
That's It
It's a SaaS. We handle the security. You use the API safely through the proxy.