Morning guys and girls 👋 , we’re using typesense for our projects on a javascript client. we use the api inside of the builded javascript, which is the search only api with keys. we’re wondering if someone got ahold of our key, what damage could they really do? are there any restrictions build in to prevent xx calls over a certain amount of time to prevent the quote from being ski high?

If you are worried about search only key being too permissive, you can use a scoped API key and bake in some limitations like

limit_hits

inside it. See: https://typesense.org/docs/guide/data-access-control.html#scraping-protection

thank you @Kishore Nallan