Error: API key in browser
Our SDK detected that you are using a Xata API key in a browser (Example API key: xau_xyz123
).
✅ Only use Xata API keys in server-side code.
In some frameworks (e.g. Next.js) it can be unclear which code is server-side and which is client-side. If in doubt, try using the Xata SDK inside an API route.
⚠️ Xata API Keys have unrestricted permissions in your Xata database.
Xata API keys can:
- Delete databases
- read/write to all tables