Principles
- Least privilege: each integration gets only the access it needs.
- Secrets stay on the server.
- Bound everything: input size, tokens, retries, time and cost.
- Idempotent actions and an audit trail.
- A kill switch you can reach without deploying.
Failure
Decide what happens when a provider is down or slow: fall back, queue, or tell the user plainly. Never fake success.
Part of: Building AI integrations
Next recommendedWebhooks, signatures and idempotencyRelated
Last updated 2026-09-25. Something unclear or wrong? Tell us.