Authenticate with least privilege
Exchange a location API key for a short-lived OAuth 2.0 token, then request only the scopes required by each integration.
Choose the right payment flow
Use hosted checkout for shopper-facing payments or the transaction APIs for authorized server-to-server operations.