Where does the LLM call belong?
Practice this question- In a server-side AI service behind authenticated Node/Next.js routes.
- React sends bounded input and receives safe text/events; provider secrets and trusted instructions stay on the backend.
Adapted from 13_AI.MD · “29.20 MERN and AI”. Code examples are study fragments. Difficulty and core labels are editorial estimates; version-specific behavior should be checked against your project.