Separate keys and environments
Use test keys during development and production credentials in your live integration. Keep keys on your server, never in browser code.
IP restrictions
Allowlists restrict which addresses can use a key. Manage IPs in the dashboard according to your infrastructure.
Signatures and history
The platform provides response signatures and call logs. Read the documentation and use call identifiers to trace individual requests.
Responsible data use
Query data appropriate for your integration’s purpose, with an applicable legal basis. Limit access to credentials and results. Read the privacy policy for details.