Add Netlify Serverless Function to Secure API Key for Live AI Chatbot

# Upwork Job Posting ## Walnut Hill Mortgage — AI Chatbot API Security Fix --- **JOB TITLE:** Add Netlify Serverless Function to Secure API Key for Live AI Chatbot --- **JOB TYPE:** Fixed Price **BUDGET:** $150–200 **TIMELINE:** 1–3 business days **EXPERIENCE LEVEL:** Intermediate to Expert --- ## PROJECT OVERVIEW I am a licensed mortgage broker in Dallas, TX. I have built and deployed an AI mortgage chatbot at **chat.walnuthillmtg.com** — the site is live, the domain is configured, SSL is enabled, and the design is complete. The one remaining task is securing the Anthropic API key by moving the API call from the browser to a Netlify serverless function. Right now the chatbot returns a connection error because browsers block direct API calls for security reasons. A serverless function fixes this completely. This is a small, well-defined, single-task job. --- ## WHAT I WILL PROVIDE YOU - ✅ Live deployed site at chat.walnuthillmtg.com - ✅ The index.html source file with all frontend code - ✅ Access to my Netlify account - ✅ My Anthropic API key (shared securely via password manager) - ✅ A complete system prompt document --- ## WHAT I NEED YOU TO DO 1. **Create a Netlify serverless function** — A simple Node.js function that receives the chat message from the frontend, calls the Anthropic API using the secured API key, and returns the response to the browser. 2. **Store the API key as a Netlify environment variable** — The key must never appear in any frontend code or public repository. 3. **Update the frontend** — Modify the fetch call in index.html to point to the serverless function instead of calling the Anthropic API directly. 4. **Test the live deployment** — Confirm the chatbot loads at chat.walnuthillmtg.com, connects properly, and responds to borrower questions before handoff. 5. **Brief plain-English documentation** — A simple note explaining how to update the system prompt in the future and how to monitor API usage in the Anthropic console. Written for a non-developer. --- ## TECHNICAL STACK - **Frontend:** HTML, CSS, vanilla JavaScript (already written) - **Backend:** Netlify serverless function (Node.js) to proxy Anthropic API calls - **API:** Anthropic Claude API (claude-sonnet-4-6 model) - **Hosting:** Netlify (already configured) - **Domain:** chat.walnuthillmtg.com (already live with SSL) --- ## IMPORTANT REQUIREMENTS - The API key must NEVER appear in any frontend code or public repository - Store the API key as a Netlify environment variable only - Do not store any user conversation data — stateless only - Do not change the design, layout, or content — frontend is finished - Do not add frameworks — keep it vanilla JS --- ## THIS IS NOT - A design job — design is done - A content job — all copy and system prompt are done - A deployment job — site is already live - A long-term engagement — this is one clean, specific task --- ## TO APPLY, PLEASE TELL ME 1. Have you built Netlify serverless functions before? 2. Have you worked with the Anthropic API or any other LLM API? 3. Can you complete this within 1–3 business days? 4. Please include a brief description of one similar project you've completed 5. Please confirm that you have read this entire posting and that you understand the API key must NEVER appear in any frontend code or public repository — security is the entire purpose of this job. --- ## ABOUT THE PROJECT This chatbot serves as a 24/7 mortgage education assistant for borrowers visiting my website. It is powered by a carefully crafted system prompt. The site is fully built and deployed — I just need the API connection secured professionally.