Every search request carries an x-api-key header sent verbatim from a constant hardcoded in /jsconstant-assets/api-key.js, loaded once at page init — no hash, no formula, just the literal value.
x-api-key
/jsconstant-assets/api-key.js
Loading API key...