Link previews from the browser. No backend, no CORS errors.

curl "https://unfurlr.onrender.com/v1/metadata?url=https://github.com" -H "Authorization: Bearer $KEY"
# or -H "X-API-Key: $KEY"

curl -X POST https://unfurlr.onrender.com/v1/metadata/batch -H "Authorization: Bearer $KEY" \
  -H "Content-Type: application/json" -d '{"urls":["https://a.com","https://b.com"]}'

const r = await fetch("https://unfurlr.onrender.com/v1/metadata?url=" + encodeURIComponent("https://github.com"), {
  headers: { Authorization: `Bearer ${KEY}` }
});
const { title, description, images, favicon } = await r.json();

import requests

r = requests.get("https://unfurlr.onrender.com/v1/metadata",
                 params={"url": "https://github.com"},
                 headers={"Authorization": f"Bearer {KEY}"}, timeout=15)
print(r.json()["title"])

// In the browser use a publishable pk_ key locked to your origin (never your secret key), or proxy via your backend.
function LinkPreview({ url }) {
  const [p, setP] = useState(null);
  useEffect(() => {
    fetch("https://unfurlr.onrender.com/v1/metadata?url=" + encodeURIComponent(url), {
      headers: { "X-API-Key": KEY }
    }).then(r => r.json()).then(setP);
  }, [url]);
  if (!p) return null;
  return <a href={p.url}><img src={p.images?.[0]} alt="" /><b>{p.title}</b><p>{p.description}</p></a>;
}

// app/api/preview/route.ts (key stays on the server)
export async function GET(req: Request) {
  const url = new URL(req.url).searchParams.get("url") ?? "";
  const r = await fetch("https://unfurlr.onrender.com/v1/metadata?url=" + encodeURIComponent(url), {
    headers: { Authorization: `Bearer ${process.env.UNFURLR_KEY}` },
    next: { revalidate: 86400 }
  });
  return Response.json(await r.json(), { status: r.status });
}