1. Confirm access and environment

Use the workspace or administrator invitation supplied to your organization. Develop against the sandbox and keep production credentials separate.

2. Create a least-privilege credential

Use the product’s approved credential-management surface. Grant only the scopes required by the integration and record an owner and rotation plan.

3. Choose a published operation

Open the API Reference and use only the documented version, method, path, request schema, and authentication requirements.

4. Make a sandbox request

Start with a non-sensitive test record. Record the request ID, response status, and relevant rate-limit headers.

5. Handle failure safely

Implement timeouts, bounded retries with backoff, idempotency where documented, secret redaction, and actionable logging.

6. Prepare production admission

Complete security and privacy review, capacity planning, monitoring, rollback, ownership, and any contract-specific controls before using production data.