diff --git a/frontend/.env.template b/frontend/.env.template
index 007f9b0..8714e78 100644
--- a/frontend/.env.template
+++ b/frontend/.env.template
@@ -1 +1,3 @@
 INFURA_ID=__add_me__
+VUE_APP_POAP_API_URL=https://api.poap.tech
+VUE_APP_POAP_API_API_KEY=hVWzovj27w9NmjN6Vzw1Wp8rysVSnQYV06WGfMSBWRkZvSlVbadmtwSroHk4wfq9iS1J3R7rF5FxshKYEa1016XElaC6OHquA5JgYLrAwN21K1emQ1VCf08sEOR1YqLG
diff --git a/frontend/src/App.vue b/frontend/src/App.vue
index 922992d..7063409 100644
--- a/frontend/src/App.vue
+++ b/frontend/src/App.vue
@@ -7,7 +7,10 @@
 <script>
 import helpers from 'src/mixins/helpers';
 
-const jsonFetch = (url) => fetch(url).then((res) => res.json());
+const poapApiUrl = 'https://api.poap.tech';
+const poapApiApiKey = 'hVWzovj27w9NmjN6Vzw1Wp8rysVSnQYV06WGfMSBWRkZvSlVbadmtwSroHk4wfq9iS1J3R7rF5FxshKYEa1016XElaC6OHquA5JgYLrAwN21K1emQ1VCf08sEOR1YqLG';
+const jsonFetch = (path) => fetch(`${poapApiUrl}${path}`, { headers: { 'x-api-key': poapApiApiKey } })
+  .then((res) => res.json());
 
 export default {
   name: 'App',
@@ -25,7 +28,7 @@ export default {
 
     // Get user's POAP tokens
     if (userAddress && JSON.parse(userAddress)) {
-      const poapTokensUrl = `https://api.poap.tech/actions/scan/${JSON.parse(userAddress)}`;
+      const poapTokensUrl = `/actions/scan/${JSON.parse(userAddress)}`;
       tokens = await jsonFetch(poapTokensUrl);
     }
     this.$store.commit('user/setTokens', tokens);
diff --git a/frontend/src/store/user/actions.js b/frontend/src/store/user/actions.js
index c901313..6c48bce 100644
--- a/frontend/src/store/user/actions.js
+++ b/frontend/src/store/user/actions.js
@@ -1,9 +1,12 @@
-const jsonFetch = (url) => fetch(url).then((res) => res.json());
+const poapApiUrl = 'https://api.poap.tech';
+const poapApiApiKey = 'hVWzovj27w9NmjN6Vzw1Wp8rysVSnQYV06WGfMSBWRkZvSlVbadmtwSroHk4wfq9iS1J3R7rF5FxshKYEa1016XElaC6OHquA5JgYLrAwN21K1emQ1VCf08sEOR1YqLG';
+const jsonFetch = (path) => fetch(`${poapApiUrl}${path}`, { headers: { 'x-api-key': poapApiApiKey } })
+  .then((res) => res.json());
 
 export async function setEthereumData({ commit }, wallet) {
   // Get user's POAP tokens
-  const poapTokensUrl = `https://api.poap.tech/actions/scan/${wallet}`;
-  const tokens = await jsonFetch(poapTokensUrl);
+  const path = `/actions/scan/${wallet}`;
+  const tokens = await jsonFetch(path);
 
   // Commit all state changes simultaneously to avoid UI inconsistencies
   commit('setWallet', wallet);