For safety reasons:

• You should not insert the API token into the frontend code.
• requests must not be sent without HTTPS
• must not exceed API limits
• may not share the token with third parties
• Tokens may not be stored in public repositories

Tokens should always be stored on the server side .