using the web snippet code there's no way to hide the api key, because it's called from the webpage, and to start the call there needs to be an authorisation header with the api key there