diff --git a/vanilla-js/index.html b/vanilla-js/index.html
index c715e916..3446067d 100644
--- a/vanilla-js/index.html
+++ b/vanilla-js/index.html
@@ -352,6 +352,7 @@ <h2 id="my-mdc-dialog-label" class="mdc-dialog__header__title">
 <script src="/__/firebase/9.22.1/firebase-app-compat.js"></script>
 <script src="/__/firebase/9.22.1/firebase-auth-compat.js"></script>
 <script src="/__/firebase/9.22.1/firebase-firestore-compat.js"></script>
+<script src="/__/firebase/9.22.1/firebase-app-check-compat.js"></script>
 <script src="/__/firebase/init.js"></script>
 
 <script src="//unpkg.com/navigo@6"></script>
diff --git a/vanilla-js/scripts/FriendlyEats.View.js b/vanilla-js/scripts/FriendlyEats.View.js
index 0e66f6a1..cc5b2e76 100644
--- a/vanilla-js/scripts/FriendlyEats.View.js
+++ b/vanilla-js/scripts/FriendlyEats.View.js
@@ -517,3 +517,9 @@ FriendlyEats.prototype.replaceElement = function(parent, content) {
 FriendlyEats.prototype.rerender = function() {
   this.router.navigate(document.location.pathname + '?' + new Date().getTime());
 };
+
+FriendlyEats.prototype.initAppCheck = function() {
+  /*
+    TODO: Initialize and activate App Check
+  */
+};
diff --git a/vanilla-js/scripts/FriendlyEats.js b/vanilla-js/scripts/FriendlyEats.js
index 7220c0f2..e5e8ac77 100644
--- a/vanilla-js/scripts/FriendlyEats.js
+++ b/vanilla-js/scripts/FriendlyEats.js
@@ -19,6 +19,21 @@
  * Initializes the FriendlyEats app.
  */
 function FriendlyEats() {
+  const isLocalhost = Boolean(
+    window.location.hostname === 'localhost' ||
+    // [::1] is the IPv6 localhost address.
+    window.location.hostname === '[::1]' ||
+    // 127.0.0.1/8 is considered localhost for IPv4.
+    window.location.hostname.match(
+        /^127(?:\.(?:25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)){3}$/
+    )
+);
+  if(isLocalhost) {
+    /*
+      TODO: Set up local debug token
+    */
+  }
+
   this.filters = {
     city: '',
     price: '',
@@ -29,6 +44,8 @@ function FriendlyEats() {
   this.dialogs = {};
 
   var that = this;
+  that.initAppCheck();
+
   firebase.auth().signInAnonymously().then(function() {
     that.initTemplates();
     that.initRouter();