Skill UI

A comprehensive guide on implementing robust Role-Based Access Control (RBAC) for Klaviyo integrations. It details how to use scoped API keys and OAuth 2.0 flows to define granular read/write permissions across various resources (profiles, campaigns, events). This is essential for building secure, multi-tenant applications that require precise permission management.

A comprehensive debugging tool designed for diagnosing complex and intermittent issues within the Canva Connect API. It systematically tests various connection layers (DNS, TLS, Authentication, Scopes), monitors stuck or failed export jobs by polling job status, and verifies the OAuth token lifecycle. Use this when standard troubleshooting fails or when preparing detailed evidence for developer support.

This guide provides comprehensive troubleshooting for common Attio REST API errors, detailing specific HTTP status codes (e.g., 400, 401, 429, 422). It explains the required error response format, common causes (like invalid scopes or rate limits), and actionable, proven fixes using code examples and best practices.

This guide outlines critical security best practices for design-to-code pipelines using Anima and Figma. It covers securing API credentials by restricting token scopes (e.g., read-only access for Figma), enforcing server-side execution for SDKs, and implementing robust secret management using cloud services like GCP Secret Manager. This minimizes the risk of credential leakage in CI/CD environments.

This guide details how to set up and manage authentication for the Attio REST API. It provides comprehensive instructions for both access token (scoped) and OAuth 2.0 flows. Users will learn how to generate tokens with specific scopes, configure environment variables, and initialize API calls using standard methods like fetch or curl. Essential for integrating applications with Attio data.

This skill provides comprehensive guidance and code examples for implementing advanced Role-Based Access Control (RBAC) for Canva Connect API integrations. It guides developers on managing user scopes, defining roles (Viewer, Creator, Admin), and enforcing granular permissions at the application middleware level, which is essential for secure and scalable Canva Enterprise deployments.

This guide provides comprehensive instructions on setting up and authenticating with the Figma REST API. It covers two primary authentication methods: Personal Access Tokens (PATs) for server-side scripting, and the OAuth 2.0 flow for building user-facing applications. Learn how to generate tokens, manage granular scopes, and securely integrate your code with Figma's design data.

Automated guardrails for enforcing security policies and coding standards across all Figma API integrations. This tool is essential for CI/CD pipelines, helping to prevent credential leaks (PATs), validate API scopes, enforce request best practices, and ensure stable, secure connectivity with Figma.

This comprehensive guide outlines essential security protocols for integrating with the Figma API. It covers best practices including securely storing Personal Access Tokens (PATs), implementing least-privilege scopes, managing token rotation lifecycles, and verifying incoming webhook payloads. Use this when setting up, auditing, or maintaining production-grade Figma integrations to ensure data integrity and prevent unauthorized access.

This skill demonstrates how to implement robust Role-Based Access Control (RBAC) within HubSpot integrations. It covers best practices for managing permissions using OAuth scopes, configuring multiple private apps for different access levels (Reader, Writer, Admin), and implementing application-level middleware to enforce least privilege access across CRM objects.

A comprehensive guide to securing HubSpot API integrations. Details best practices for implementing least-privilege scopes, securely managing access tokens in environment variables, validating webhook signatures (v3), and executing proper token rotation procedures. Essential knowledge for building robust and secure applications connected to HubSpot.

This comprehensive guide outlines essential security best practices for integrating with Intercom. It covers secure token storage, robust webhook signature verification (X-Hub-Signature), implementing Identity Verification, and adhering to least-privilege OAuth scopes. Use this guide when building secure, production-ready applications that interact with Intercom APIs.