Text to speech

OpenAI-compatible. Returns audio bytes with the provider's content type, not JSON. Requires inference.

Calling from a browser. Requests carrying an Origin header are refused with a 403 unless they also send x-roar-dangerous-browser-access: true. Your API key belongs on your server: put it in a web page and every visitor can read it, and there is no way to un-leak it afterwards. Send the header only when that is genuinely what you want — an internal tool, or an app where each person supplies their own key. Server-side calls send no Origin and are unaffected.