#api-key-security

Search‑Only Key vs. Server‑Side Proxy: Which Limits Public Exposure Better?

Goal Reduce accidental public exposure of Algolia API keys while maintaining functional client‑side search. Constraints Search‑only keys can be embedded in browser code but still expose all searchable attributes. Private keys must be used server‑side; exposing them defeats their purpose. Key revocation propagates only after a brief delay, creating a short ri