🔐

Pollinations.AI Security & Access Overview

Aug 6, 2025

Summary

  • The meeting reviewed the Pollinations.AI authentication process, including tiered access levels, ad integration, and best practices for securing API tokens.
  • Key topics covered were tier assignment, ad behavior, instructions for identifying referrers/domains, and guidance on secure API key management.
  • No decisions or critical issues were raised, and attendees focused on clarifying usage and setup steps for new users.

Action Items

  • No action items were specified in the transcript.

Tier System Overview

  • Users are automatically assigned to the Seed tier upon first login.
  • Higher tiers (Flower and Nectar) are available through limited pilots during beta.
  • Advancing to higher tiers allows for increased GenAI usage.
  • A future beta feature will allow users to level up faster by enabling more ads.

Advertising Integration

  • Anonymous, contextual ads may appear in some GenAI API responses when active.
  • Users can choose to show or hide ads.
  • Enabling more ads may expedite access to higher tiers once beta features launch.

Referrer/Domain Requirements

  • Users must enter the primary domain or referrer used by their application.
  • Step-by-step instructions are provided for locating the referrer in browser developer tools:
    1. Access developer tools and the Network tab.
    2. Make an API request from your app.
    3. Review the Referrer header in the request details.
  • Examples of valid domain formats are provided for clarity.

API Token Management

  • Users can generate private, secure tokens for backend or server integrations.
  • Tokens are required for secure access to GenAI models via API.
  • Recommendations:
    • Never share tokens publicly or commit them to Git repositories.
    • Store tokens safely in .env files.
  • Usage instructions: Pass tokens in the Authorization header or as a query parameter in API requests.
  • Tokens are well-suited for backend applications such as Discord bots or AI chatbots.

Decisions

  • No formal decisions were recorded.

Open Questions / Follow-Ups

  • No unresolved questions or follow-ups documented.