Algolia

Algolia enables you to provide search functionality to your customers, indexing your data to support autocomplete and other features.

Securing your public API keys

For most of our Actions that use Algolia, we make requests to query your indexes directly from your users' browsers rather than from our back-end serverless functions. As this requires us to expose your Algolia API keys, Algolia provides a 'search-only' API key that's specifically intended to be used on the front-end and limits access to your Algolia account. However, this API key still gives near-unlimited access to query the data in your Algolia indexes, including those that you may not want to make available to users via your Action Links. We therefore recommend that you create your own API key from your Algolia account which will allow you to specify the indexes that you want to give access to, as well as setting rate limits and other controls on the number of requests that a user can make (e.g. by IP address). Just make sure you give 'search' access and include the relevant index(es).