Automation that connects your whole customer journey.

How AI connects to a website

The browser never talks to the AI provider directly.

A secure integration puts a small server layer between your website and every outside service. The website sends a visitor's message or form to your endpoint. That endpoint checks it, adds approved business context, calls the AI model or business system with a secret key, and returns only what the visitor should see.

• API keys are stored as encrypted server environment variables
• Input validation, rate limits and bot protection on every endpoint
• Only minimum necessary data is sent to third parties
• Logs exclude sensitive fields; retention is defined up front

// Browser (public) — no secrets
fetch("/api/chat", { method: "POST", body: JSON.stringify({ messages }) })

// Server function (private) — Cloudflare Pages Function
export async function onRequestPost({ request, env }) {
  // validate input, rate-limit, then:
  const res = await fetch(PROVIDER_URL, {
    headers: { "x-api-key": env.AI_API_KEY }  // secret stays here
  });
  return Response.json({ reply });
}

Simplified example. The full, commented version is in the project README.