SparkGlim Developer
Access with a defined scope.
Understand Public, Campaign and Private Organization keys, domain approval and the separate reseller session model.
Keys and capabilities
Copy the complete key value issued in Creator settings. It already contains its identifier as keyId:secret; do not request or invent another standalone identifier.
Public access
Public and Campaign Keys read only the safe resources allowed by the endpoint and scope. A Campaign Key never expands access to another campaign.
Safe implementation
Keep the Private Key on a trusted backend. Private requests use domain-bound HMAC signature version 2 with a fresh nonce; API paths remain Version 1.
Reseller access
Reseller sessions and member permissions are separate from Organization keys. Review the approved account relationship and use only the authentication documented for the actual endpoint.