Comment by gregoriol

7 hours ago

Why contact Algolia when it is the users' responsibility to handle their keys? Contact all the users.

If this happens so often, perhaps Algolia should improve their stuff to prevent this? For example, by implementing a dedicated search endpoint that doesn't accept normal API keys, but only dedicated read-only keys.

because if it's easy to dangerously use one's product that reflect poorly on the product. Algolia should help its clients from making silly mistakes.