Security — the no-login model

End-users (your clients) use the widget without logging in. The client key is visible in the code (it's public), but it's protected by:

• Domain whitelist: the widget can only be embedded on domains you registered (CSP frame-ancestors). Copying the key to another site won't work.
• Rate limiting: blocks excessive request creation and lookups.
• Per-document tokens: each client's work is gated by a token scoped to that one document.