Test #12: Developer console — keys, webhooks, scopes, code

TIER 4 of 6 (INVOLVED). Keys, webhook endpoints, a scope chip row and a fenced code block. DELIBERATELY attacks the capture filters: it contains long opaque token strings and address-shaped text, both of which the current scanner silently discards.

API keys

Publishable key
Safe to ship in your page
Secret key
Server side only, never in a browser
Rotate on schedule
Mint a new key every ninety days

Webhooks

Endpoint
Delivery target for events
Signing enabled
Every payload carries a signature header
Retry policy
Deliver test events

Scopes

Quick start

curl https example test v1 identities \
  -H "Authorization: Bearer pk_live_8f3a2c9d1e7b4f60a2\n  -d scope=identity.read

help-scan reveal log