Start free. Scale as your blog grows.Get started
ContioReach

Developer documentation

API Keys

Your API key authenticates requests from your application to your ContioReach workspace.

Find your API key

Inside your ContioReach workspace:

  1. 1Open Developer Settings
  2. 2Find API Keys
  3. 3Copy your blog API key

Store your key securely

Use an environment variable:

.env.local
CMS_API_KEY=your_api_key_here

Then access it only from server side code:

server
const apiKey = process.env.CMS_API_KEY;

Do not expose your API key

Do not place your API key:

  • Directly inside frontend source code
  • Inside browser JavaScript
  • In a public Git repository
  • In HTML
  • In public environment variables
  • Inside client side network requests

For example, avoid:

Avoid this
NEXT_PUBLIC_CMS_API_KEY=your_api_key_here

Values prefixed with NEXT_PUBLIC_ are intended to be available to browser code in Next.js. Your ContioReach API key should remain private.

Using ContioReach from the browser

If a Client Component needs ContioReach data, call your own backend route.

Recommended architecture

  1. Browser
  2. Your server
  3. ContioReach Content API

Your server sends the API key to ContioReach. The browser never receives it.

PreviousQuickstartNextEnvironment Setup