apideck-best-practices
Installation
SKILL.md
The Apideck Unified API base URL is https://unify.apideck.com. All API calls must be made server-side to prevent token leakage.
Authentication
Every API call requires three headers: Authorization: Bearer {API_KEY}, x-apideck-app-id, and x-apideck-consumer-id. The x-apideck-service-id header specifies which downstream connector to use (e.g., salesforce, quickbooks, xero). When a consumer has multiple connections for the same unified API, x-apideck-service-id is required.
Never hardcode API keys in source code. Always use environment variables or a secrets manager. Never expose API keys to the client/browser.
SDK Selection
Always use the official Apideck SDK for the user's language. Do not make raw HTTP calls when an SDK is available: