diff --git a/web-interface/server.js b/web-interface/server.js
index e8f90cc..cb25f60 100644
--- a/web-interface/server.js
+++ b/web-interface/server.js
@@ -8,6 +8,13 @@ const fs = require('fs');
 const app = express();
 const PORT = process.env.PORT || 3000;
 
+// Security / Iframe Fix
+app.use((req, res, next) => {
+  res.setHeader('X-Frame-Options', 'SAMEORIGIN');
+  res.removeHeader('X-Frame-Options'); // Try to remove it completely first, if proxy allows
+  next();
+});
+
 // Storage manager routes
 const storageManager = require('./storage-manager');
 app.use('/api/clones', storageManager);
@@ -628,10 +635,10 @@ app.get('/api/optimized-pages', (req, res) => {
 // AI Agent Route (MiniMax)
 app.post('/api/ai/agent', async (req, res) => {
   const { systemPrompt, userMessage } = req.body;
-  const apiKey = process.env.MINIMAX_API_KEY;
+  const apiKey = process.env.MINIMAX_API_KEY || 'sk-cp-iWzSsdzjVy0tT5dnvv_sGrAlv3Nw7kkrZ8hPK0KjbNeSRQxIY1O6AhkQAq_yrYV1XPJY1TH6ZQeOlJZd-Zi_elkJhef9PcTSzn2m9bcKIxezarM19BREcVM';
 
   if (!apiKey) {
-    return res.status(500).json({ error: 'MINIMAX_API_KEY is missing in .env' });
+    return res.status(500).json({ error: 'MINIMAX_API_KEY is missing' });
   }
 
   try {