Working AI Chatbot
Live /api/chat route with validation, guarded system prompt, Anthropic integration, rate limits, and safe demo fallback.
A Next.js 15 AI SaaS boilerplate with a real demo chatbot, voice interface, credit model, Stripe checkout/webhook flow, and security guardrails you can verify in production.
Live /api/chat route with validation, guarded system prompt, Anthropic integration, rate limits, and safe demo fallback.
Browser speech-to-text + text-to-speech wired into the chat flow; no third-party voice bill for the basic demo.
The demo deducts credits per AI call; checkout is plan-allowlisted and ready to extend into Stripe customer provisioning.
Tenant panel models isolated workspace state, plan, members, and branding foundations.
Payment links, checkout API, webhook route, signature verification, and no open redirects.
CSP, frame protection, no wildcard API CORS, body-size checks, validation, rate limits, and secret-safe errors.
The production app now sets CSP, frame-ancestor blocking, HSTS via Vercel, no secret leakage in API errors, request validation, rate limiting, Stripe signature verification, and checkout plan allowlisting.