KWNDevelopersالعربيةOpen KWN

Guides

Going live checklist

What to check before your integration handles a company’s real documents.

  • The key lives in a secret store on your server, never in a browser, app or repository.
  • The key holds only the scopes it needs, and GET /me confirms the company you expect.
  • Every creating POST sends an Idempotency-Key, reused on retries.
  • Every record you create carries your externalId, and you look records up by it.
  • Your code reads code in a refusal, honours Retry-After on a 429, and stops on a 401.
  • Sync runs on updatedSince with a small overlap, not by reading everything.
  • For e-invoices: eInvoicing.available is true, the company’s details are complete, you send expectedTotal, and you follow each invoice to CLEARED or REJECTED.
  • Someone at the company knows the key exists, what it is for, and how to revoke it.