REST API Integration Skill

Where API calls belong

• Server-side by default (Server Component fetch, Server Action, or route handler) for anything using a secret API key — never expose third-party API keys to the client.
• Client-side fetch only for public, unauthenticated endpoints or endpoints proxied through your own backend that don't need a secret.