Confirm the supported interface
Contact support with the operations your application needs. Obtain the current supported endpoint reference, authentication method, permissions and limits for your service before implementation.
Separate demonstrations from integrations
The console can display demonstration data. A rendered device list or example response is not evidence of a working device-management API. Confirm the actual service and test a limited scope.
Protect credentials
Keep API credentials out of public repositories and client-side pages. Ask how they are scoped and revoked, and start with the minimum permissions needed.
Review changes before applying them
Device creation, deletion, rebuilds and purchases can affect data or billing. Review parameters and the resulting service charge before enabling those operations in an unattended integration.