Best practices

What makes an integration last.

• Use incremental mode (desde + depoisDe) to sync: it brings only what changed and does not hit the limit.
• Handle 429 by waiting the Retry-After with exponential backoff — never retry in a tight loop.
• Send Idempotency-Key on every POST: the network drops, your routine repeats, nothing duplicates.
• Verify the webhook signature before processing; answer 2xx fast and process afterwards.
• One key per integrated system, with the smallest scope that works; revoke what is unused.

Inadequate ways

• Sweeping the whole list every minute — incremental mode replaces exactly that.
• Sharing the API key with end users or embedding it in a mobile app or public page.
• Writing via API without a responsible user on the key — the trail would have no author, hence 409.