API Terms

API credentials are confidential and must not be embedded in public client code or shared outside authorized users and systems. API keys may be scoped, rotated, expired, or revoked. Documented quotas, rate limits, billable units, retries, idempotency behavior, and versioning rules apply to API calls. Attempts to bypass quotas, authorization boundaries, provider restrictions, or service protections are prohibited. Clients should use request IDs for support and debugging, follow documented retry guidance, validate webhook signatures where applicable, and avoid sending secrets or unnecessary personal data in request fields not designed for them.