Production checklist
Launch with explicit limits, safe retries and human review.
- 01
Allowlist exact partner HTTPS origins and test expired sessions and revoked keys.
- 02
Configure default response language and up to three HTTPS result buttons in Team & Settings.
- 03
Use stable hashed end-user usage identity for configured daily caps; counters follow UTC.
- 04
Persist requestId before submission and reuse it only within the same credential/session context.
- 05
Handle 400, 401, 403, 413, 422 and 429 without unlimited retries or bypassing quotas.
- 06
Keep credentials and customer trade evidence out of application logs; retain your own order confirmation and trading permissions.