---
title: A note on public endpoints
slug: a-note-on-public-endpoints
docTags: 
createdAt: 2024-03-13T21:35:19.924Z
---

These endpoints are also used in our widgets. The public endpoints don't require any authentication / API keys, and are well-suited for client-side use — especially where CORS policies are concerned. 

We caution against using our non-public (Integration API) endpoints on the client-side for security purposes (as Brella API keys can have both read/ write permissions).