API & Integrations

Creating API credentials

Issue scoped credentials for integrations without sharing an administrator password.

Updated Sep 3, 2026 49 views

Creating API credentials

Create a separate API client for every external integration. Choose only the scopes that integration requires and store the client secret in a secure secret manager or protected environment configuration.

API secrets are shown only when created. Rotate a secret immediately if it is exposed. Do not place a secret in browser JavaScript, screenshots, public repositories or support ticket subject lines.

Use HTTPS for every API request and send a unique idempotency key for retryable write operations when the endpoint supports it.

Was this article helpful?

Your feedback helps us improve BusinessSuiteX documentation.