Client side API Key security

[muddi900]

Hello

The sdk is great. I have a working prototype of my app within 3 days. Doing everything client side is quite quick.

However, this exposes the API key to any malicious actor on the client side. Especially on the web. I can build with obfuscation, but it would still not be good security practice to embed the key in the app. I also do not want to redo everything on the server side. Especially since there aren't many dart server sdks. This would require me to do all the work from scratch again. Would it be possible to secure this client-side?

[depombo]

@muddi900 I got tired of having to spin up a backend to use the Gemini / Anthropic / OpenAI private key API and figure out usage and error analytics per user in my apps so I created Backmesh, the Firebase for LLM APIs. It lets you safely call any LLM API from your app without a backend with analytics and rate limits per user. It might suit your use case well!

https://backmesh.com