Public access
All core NaijaTaste endpoints are publicly accessible with no authentication:POST /recommendPOST /simulate-reviewGET /places/top-picksGET /place-details/{place_id}GET /cache/statsGET /health
Three-key rotation (internal)
The API uses a three-key round-robin rotation on Gemini API keys internally, giving 3× the free-tier quota. This is handled server-side — you don’t need to worry about it as an API consumer.What an API key tier will cover
A key tier is planned for:- Higher rate limits for production integrations
- Access to user-level persona snapshots (with user consent)
- Webhooks for cache invalidation events
- Priority support
Using a key when available
Security practices
- Do not embed keys in client-side code or public repositories
- Store keys in environment variables
- Rotate immediately if compromised
Rate limits
Understand the per-IP limits and how to handle rate limit responses.