Skill UI

Automated guardrails for enforcing security policies and coding standards across all Figma API integrations. This tool is essential for CI/CD pipelines, helping to prevent credential leaks (PATs), validate API scopes, enforce request best practices, and ensure stable, secure connectivity with Figma.

This comprehensive guide outlines essential security protocols for integrating with the Figma API. It covers best practices including securely storing Personal Access Tokens (PATs), implementing least-privilege scopes, managing token rotation lifecycles, and verifying incoming webhook payloads. Use this when setting up, auditing, or maintaining production-grade Figma integrations to ensure data integrity and prevent unauthorized access.

This skill demonstrates how to implement robust Role-Based Access Control (RBAC) within HubSpot integrations. It covers best practices for managing permissions using OAuth scopes, configuring multiple private apps for different access levels (Reader, Writer, Admin), and implementing application-level middleware to enforce least privilege access across CRM objects.

A comprehensive guide to securing HubSpot API integrations. Details best practices for implementing least-privilege scopes, securely managing access tokens in environment variables, validating webhook signatures (v3), and executing proper token rotation procedures. Essential knowledge for building robust and secure applications connected to HubSpot.

This comprehensive guide outlines essential security best practices for integrating with Intercom. It covers secure token storage, robust webhook signature verification (X-Hub-Signature), implementing Identity Verification, and adhering to least-privilege OAuth scopes. Use this guide when building secure, production-ready applications that interact with Intercom APIs.

This guide provides a comprehensive reference for diagnosing and resolving common errors encountered when integrating with the Lucidchart API. It covers critical issues such as OAuth token expiration (401), insufficient scopes (403), document locking conflicts (409), and shape validation errors (422). Developers can use this resource to implement robust error handling, manage rate limits, and ensure stable programmatic diagram creation.

Comprehensive guide for setting up delegated authentication for the OneNote Graph API using MSAL. Learn how to register applications in Azure AD, configure precise permission scopes, install SDKs (Python/TypeScript), and implement token caching. This guide specifically addresses the migration from deprecated app-only authentication methods.

This guide provides comprehensive instructions on implementing secure authentication and managing the token lifecycle for the OneNote Graph API. It details the mandatory shift from deprecated app-only authentication to delegated authentication using MSAL, ensuring compliance with modern OAuth 2.0 standards. Key topics include establishing least-privilege permission scopes, handling token renewal, and securely storing credentials using environment variables or Azure Key Vault. Essential for developers building resilient and compliant OneNote integrations.

This skill provides a comprehensive guide for deploying Palantir Foundry integrated applications to major cloud platforms, such as GCP Cloud Run, AWS Lambda, and Docker. It covers best practices including containerization using Docker, implementing robust secrets management via cloud secret managers, establishing health check endpoints, and configuring environment-specific scopes. This process ensures applications are production-ready, secure, and highly available.

This guide outlines comprehensive security best practices for integrating with Palantir Foundry. It covers secure credential storage (using secrets managers like AWS Secrets Manager or Vault), implementing the Principle of Least Privilege via OAuth2 scopes, and establishing robust credential rotation procedures. Use this when securing production environments, setting up new data pipelines, or auditing existing API access controls.

A comprehensive guide detailing best practices for securing Salesforce integrations and API access. It covers configuring Connected Apps with minimum OAuth scopes, implementing least privilege access, establishing dedicated integration users, and enforcing Field-Level Security (FLS). Essential knowledge for robust API development, security audits, and maintaining data integrity within the Salesforce ecosystem.

A comprehensive guide for diagnosing and fixing common Shopify API errors, including HTTP status codes (401, 403, 422, 429) and GraphQL userErrors. This tool helps developers quickly identify the root cause of failed API requests, whether due to incorrect scopes, expired tokens, or validation issues, and provides actionable steps for resolution.