An API key can be called from all domains or only from "Authorized Domains". Altogic allows consumers of your application services (e.g., frontend app, other backend apps) to use "Authorized Domains". In such a case, your application endpoints must be called from Authorized Domains, otherwise, Altogic raises an error.