Skill UI

This skill provides a structured guide for setting up CI/CD pipelines to test Persona identity verification integrations. It demonstrates how to use sandbox API credentials, simulate webhooks, and run comprehensive integration tests. It is essential for developers ensuring the reliability and security of KYC/identity services before deployment.

This guide details best practices for securing Persona identity verification implementations. It covers critical security measures such as API key rotation, webhook HMAC verification, encrypting Personally Identifiable Information (PII) at rest, and maintaining comprehensive audit logs. Use this when integrating Persona into a production system requiring high data security and compliance.

This guide demonstrates how to set up a secure and robust webhook endpoint to process identity verification events from Persona. It covers essential security practices, including HMAC signature verification using TypeScript and Express, handling critical KYC lifecycle events (like inquiry approval/declination), and implementing idempotent processing to prevent data duplication. Ideal for integrating third-party identity services into a web application.

This guide provides implementation patterns for secure integration with the Podium API using REST API calls. It focuses on establishing robust connections with OAuth2 authentication for managing core business functions, including messaging, retrieving customer reviews, and processing payments. It also details essential error handling strategies.

Provides foundational knowledge and implementation patterns for connecting to the Procore API. This skill details how to securely implement OAuth2 authentication (using the Client Credentials flow) to manage data in critical construction processes, including project tracking, RFIs, and document submittals.

This guide provides implementation patterns for establishing security basics when working with QuickNode. It details how to utilize blockchain RPC endpoints and the QuickNode SDK for robust Web3 infrastructure integration. Learn best practices for secure connection, understanding error handling (like 401 Unauthorized or rate limiting), and building reliable applications on the Ethereum network.

This skill provides implementation patterns for interacting with the Ramp Developer API, focusing on security basics, OAuth2 authentication, and managing corporate card and expense data. It guides developers through obtaining access tokens, querying card information, and handling common API errors, making it essential for integrating financial sync or expense tracking into custom applications.

This guide implements comprehensive policy guardrails for robust Salesforce integrations. It provides solutions for preventing SOQL injection vulnerabilities, detecting hardcoded credentials, throttling API usage at runtime, and enforcing code quality via custom ESLint rules and CI/CD checks. Use this when building secure, scalable, and compliant Salesforce applications.

A comprehensive guide detailing best practices for securing Salesforce integrations and API access. It covers configuring Connected Apps with minimum OAuth scopes, implementing least privilege access, establishing dedicated integration users, and enforcing Field-Level Security (FLS). Essential knowledge for robust API development, security audits, and maintaining data integrity within the Salesforce ecosystem.

This comprehensive guide outlines best practices for securing SalesLoft API access and integrations. It details secure token lifecycle management (OAuth refresh), implementing robust webhook signature verification using HMAC-SHA256 to prevent replay attacks, and enforcing scope minimization for least-privilege access. Use this when designing production-grade, secure enterprise integrations.

This guide details how to deploy SerpApi-powered search functionality into production environments using modern serverless platforms like Vercel and Google Cloud Run. It critically emphasizes the security requirement: all API calls must be proxied through a secure backend endpoint and must never expose the API key to client-side browsers, ensuring robust and secure search integrations.

This guide outlines essential security best practices for managing and protecting your SerpApi API key. Since the key grants full account access, developers must never expose it in client-side code. It details how to implement secure backend proxies, manage environment variables using secret managers, set up rate limiting to prevent abuse, and monitor usage patterns in production environments.