Identify the API
Verify product keys, integration credentials and an agent’s workspace session are different kinds of authentication. Use the authentication section for the specific endpoint you want to call.
Keep server secrets on the server
Store credentials in your server’s secret configuration. Do not paste them into a website snippet, a customer chat or a public repository. Public widget configuration uses its documented embed identifier.
Check scopes and rotation
Use the access required for the task and follow the product’s documented revoke or rotation process. Do not assume an old credential remains valid for a fixed overlap period.
Check availability
The developer documentation distinguishes available and planned API surfaces. Confirm the supported authentication method before building an integration around an example key.
Keep going
Put the next step into practice, or ask us about your setup.