Safety, limits and errors

The API lives at https://api.bizconnext.com/v1 · send the key in the Authorization: Bearer header only — never in a URL (it is blocked at once) or a web page others can open · if you think a key leaked, press "Revoke"; it stops at once · limits follow your package, per key per minute and per company per day (Thai time); over the limit you get 429 with when to retry · more than 30 wrong, expired or revoked keys in a minute from one IP pauses that IP for a minute (429) · every error has a code — insufficient_scope, not_found (missing, or another company's id), key_revoked, key_expired, ip_not_allowed — and a request_id to give our team · each call is logged with time, path and result (never employee data).