Integration keys
An integration key currently has broad administrative access to the tenant’s data and actions. You cannot assign it permissions or configurable scopes. Take these measures:- create a different key for each external system;
- store it in a secrets manager;
- limit who can view it in the system that uses it;
- revoke it if it is no longer used or you suspect exposure;
- coordinate key rotation with the integration.
External notifications
Use external notifications when another system needs to react to catalog, stock, order, manufacturing or maintenance changes.