# Securing a retail AI endpoint from abuse for virtual try on

DevFeed: [Securing a retail AI endpoint from abuse for virtual try on](<https://devfeed.tech/articles/securing-a-retail-ai-endpoint-from-abuse-for-virtual-try-on-16643.md>)

Original publisher: [Read original article](<https://firebase.blog/posts/2025/11/securing-ai-endpoints-from-abuse>)

Author: Alexander Nohe

Published: 2025-11-11T00:00:00Z

Content type: tutorial

Language: en

Sources: [Firebase Blog](<https://devfeed.tech/sources/firebase-blog.md>)

Topics: [Artificial Intelligence](<https://devfeed.tech/topics/ai.md>), [Firebase](<https://devfeed.tech/topics/firebase.md>), [Authentication](<https://devfeed.tech/topics/authentication.md>), [Back end](<https://devfeed.tech/topics/backend.md>), [Code](<https://devfeed.tech/topics/code.md>), [cURL](<https://devfeed.tech/topics/curl.md>)

Tags: [ai](<https://devfeed.tech/tags/ai.md>), [app-check](<https://devfeed.tech/tags/app-check.md>), [attestation](<https://devfeed.tech/tags/attestation.md>), [authentication](<https://devfeed.tech/tags/authentication.md>), [backend](<https://devfeed.tech/tags/backend.md>), [code](<https://devfeed.tech/tags/code.md>), [curl](<https://devfeed.tech/tags/curl.md>), [devices](<https://devfeed.tech/tags/devices.md>), [firebase](<https://devfeed.tech/tags/firebase.md>), [generation](<https://devfeed.tech/tags/generation.md>), [genkit](<https://devfeed.tech/tags/genkit.md>), [how-to](<https://devfeed.tech/tags/how-to.md>), [image](<https://devfeed.tech/tags/image.md>), [model](<https://devfeed.tech/tags/model.md>), [rate-limiting](<https://devfeed.tech/tags/rate-limiting.md>), [retail](<https://devfeed.tech/tags/retail.md>), [server](<https://devfeed.tech/tags/server.md>), [token](<https://devfeed.tech/tags/token.md>)

## AI overview

A tutorial on protecting a Firebase AI endpoint for a virtual try-on application. It explains using App Check, replay-protected tokens, authentication, and rate limiting to reduce unauthorized access, replayed requests, and excessive generation costs.

## Source excerpt

Learn how to protect expensive AI features from abuse using Firebase App Check, Authentication, and rate limiting to ensure only legitimate users can access them.