Bubble API Connector API Calls : all from the server?

Are all API Calls made with the Bubble API Connector made from the server ?

My API provider explicitely refuses API Calls made from client-side for security reasons