API Authentication

Protect credentials and follow the authentication requirements supplied for your active API service.

Protect credentials

Store secrets server-side. Do not expose them in public JavaScript, repositories, screenshots or shared documents.

Use the active specification

The exact mechanism must match the API service enabled for your account. Do not invent headers, parameter names or credential formats.

Suspected exposure

If a credential may be exposed, stop using it and contact support about the appropriate security action.