Search & Fill is browser-local: an operator loads data, searches rows, picks the record, and validates the result in the workspace. API Fill is a hosted runtime. The caller sends structured JSON, authenticates with the endpoint key, and receives a PDF back from the backend. Those are different trust boundaries and should not be blurred together.
That distinction matters operationally too. Hosted API requests need their own rate limits, request caps, and audit activity. Browser-local Search & Fill does not. Keeping those boundaries explicit makes the product easier to reason about and easier to secure later.