Best Practices

Follow these implementation practices aligned with current API documentation.

Authentication & Security

Store Tokens Securely

Use environment variables, never hardcode tokens.

Use HTTPS Only

Always use HTTPS for API requests.

Send Bearer Token for Secured Endpoints

Include a valid token in the Authorization header.

Request Hygiene

Match Required Fields Exactly

Send only documented required/optional fields per endpoint.

Use Correct Country Codes

Use ISO 3166-1 alpha-2 country codes where required.

Handle Token Expiry

Access tokens expire after 4 hours; use refresh token flow.

Next Steps