Keep API keys in server actions and route handlers
Store your Bird API key in server-side environment variables to keep credentials out of browser bundles and client components. Trigger OTP codes, email receipts, and SMS alerts from Next.js server actions or route handlers.