title: TrackJS: how to prevent attackers from using my token?
body: <p>I'm planning to use TrackJS to monitor errors from my app but by reading the <a href="https://docs.trackjs.com/browser-agent/installation/#auto-install" rel="nofollow noreferrer">documentation</a> it seems that my private token must be exposed on the browser:</p>
  <pre><code>&lt;script src=&quot;https://cdn.trackjs.com/agent/v3/latest/t.js&quot;&gt;&lt;/script&gt;
  &lt;script&gt;
    window.TrackJS &amp;&amp; TrackJS.install({
      token: &quot;YOUR_TOKEN&quot;
    });
  &lt;/script&gt;
  </code></pre>
  <p>The API have limit of request that I can do. So, an attacker could stole my token by reading the source code and make many requests to TrackJS API using it. How can I prevent this type of attack?</p>