OpenRouter needs a free API key you paste below. Pollinations needs no key at all — switch providers from the model menu (⌄ next to the model name).
For a public app, use a server-side proxy to keep the API key private.
Local troubleshooting panel. The secret command is visible in client-side code and is not secure authentication or a safety bypass.