If a client-facing web page is making requests directly to our service, it will need an access token. To avoid exposing your main account's token to the public, we recommend using temporary client tokens. The process looks like this:

• When generating page content, your server asks the Regrid API for a temporary client token limited to typeahead calls (details below). You can create as many of these as desired, for free.
• The javascript autocomplete widget uses this token to call Typeahead API
• If it's invalid or expired, the request will return an HTTP code 400. You may wish to refresh the page to regenerate the client token