D

Production Checklist

Production API Checklist

Before shipping an integration:

  • Create a dedicated API key with the smallest scope set.

  • Verify GET /api/v1/me and tenant identity.

  • Discover /api/v1/capabilities.

  • Test one read and one write in a non-production workspace.

  • Log request ids and response status.

  • Configure timeouts, retry backoff, and alerting.

  • Rotate and revoke keys during offboarding.

  • Review Org policies and resource permissions quarterly.