01
Organization requests
The Organization API requires key ID, signature, timestamp and nonce headers. Scopes and key capabilities determine which operations are allowed, and replay protection rejects reused signatures.
02
Reseller sessions
Reseller portal requests use an authenticated SparkGlim session and enforce member permissions. A reseller session is not interchangeable with an Organization API key.
03
Credential handling
Keep secrets on your server, restrict access to deployment credentials and rotate keys through the approved account workflow. Use the Developer Platform for the exact signing format.
Connect this to your operating model.
Review your organization or reseller responsibilities alongside the products, account permissions and support arrangements you need.