Next.js

Store API keys in server environment variables. Create or look up share tokens in Route Handlers, Server Actions, or your existing Node backend. Forward only the embed URL or token to Client Components.

On a product or listing page, fetch the BANANA-GOAT token associated with your asset ID, then render an iframe to https://app.banana-goat.com/embed/{token}.

For App Router pages, prefer server components for the token lookup and a small client island only if you need interactive chrome around the iframe.

Expose a Route Handler such as POST /api/hooks/banana-goat, verify the signature, and update your database when model.processed arrives. Then your storefront can embed without polling BANANA-GOAT on every page view.