Public API

Backend proxy

Recommended pattern: keep the secret key on your server and proxy calls.

Example (Next.js Route Handler)

Meatup (meatup.ma) in this workspace is a working reference — see restaurant-website/src/lib/kitchensflow.ts.

javascript

// app/api/orders/route.js — your server
export async function POST(request) {
  const body = await request.json();

  const res = await fetch(`${process.env.KITCHENSFLOW_API_URL}/orders`, {
    method: "POST",
    headers: {
      Authorization: `Bearer ${process.env.KITCHENSFLOW_SECRET_KEY}`,
      "Content-Type": "application/json",
    },
    body: JSON.stringify(body),
  });

  return Response.json(await res.json(), { status: res.status });
}