Your AI-built app's AI endpoint has no login check: close it before it spends your credits

In a Lovable- or Bolt-style app, any server route that calls a paid model and skips the login check can be called by anyone who finds its URL, and every call bills your account. Find those routes by l