Hiding the API Key

Thanks. I’ve set up a backend structure to handle the API request, but it is separate from my discourse instance (not connected to discourse at all). Is there a way to have this occur on the back-end of the discourse app itself?

I assume it depends on how/where your discourse instance is hosted. Would there be a way to link to the backend for an app hosted with discourse.org?