SalesLoft Production Checklist

Overview

Go-live checklist for SalesLoft API integrations covering auth, error handling, monitoring, rate limits, and rollback procedures.

Pre-Launch Checklist

Authentication & Secrets

• Production OAuth app created (separate from dev/staging)
• Tokens stored in secret manager (AWS Secrets Manager, GCP Secret Manager, Vault)
• Token refresh logic tested (simulated expired token)
• Webhook signing secret rotated from dev value

Error Handling

• 401 triggers automatic token refresh (not crash)
• 429 handled with backoff using Retry-After header
• 5xx retried with exponential backoff (max 3 attempts)
• 422 validation errors logged with request payload
• Circuit breaker prevents cascade during SalesLoft outages

Rate Limiting

• Cost-based budget calculated for expected volume
• Deep pagination avoided (page > 100 costs 3-30x)
• Bulk operations use p-queue or similar throttle
• Rate limit headers logged for capacity planning

Monitoring & Alerting

// Health check endpoint
app.get('/health', async (req, res) => {
  try {
    const start = Date.now();
    await api.get('/me.json');
    res.json({
      status: 'healthy',
      salesloft: { connected: true, latencyMs: Date.now() - start },
    });
  } catch {
    res.status(503).json({ status: 'degraded', salesloft: { connected: false } });
  }
});

• Health check includes SalesLoft connectivity
• Alert on 5xx error rate > 5/min (P1)
• Alert on 429 rate > 10/min (P2)
• Alert on auth failure (P1 -- token may be revoked)
• Latency p99 tracked (baseline: 300ms reads, 500ms writes)

Data Integrity

• Idempotency keys on all create/update operations
• Duplicate detection by email before person creation
• Webhook events deduplicated by event ID
• Audit log captures all API mutations

Rollback Procedure

# 1. Revert deployment
kubectl rollout undo deployment/salesloft-integration
# or: git revert HEAD && git push

# 2. Verify old version healthy
curl -f https://app.example.com/health

# 3. Pause any running cadence syncs
# 4. Notify sales team of rollback

Post-Launch Verification

# Smoke test production endpoints
curl -s -H "Authorization: Bearer $PROD_TOKEN" \
  https://api.salesloft.com/v2/me.json | jq '.data.email'

curl -s -H "Authorization: Bearer $PROD_TOKEN" \
  'https://api.salesloft.com/v2/people.json?per_page=1' | jq '.metadata.paging.total_count'

Error Handling

Resources

• SalesLoft Status
• API Logs

Next Steps

For version upgrades, see salesloft-upgrade-migration.