Skip to content

Account & platform

Create a separate Fabric application for each independently deployed integration. Sandbox and live are isolated inside the application — API keys, activity, definitions, and webhook endpoints all belong to one environment.

  • Give each deployment its own key so it can be revoked without affecting another service.
  • Grant only the scopes the service needs.
  • Store keys in a secret manager and show only their prefix in logs or support messages.
  • Rotate immediately after suspected exposure.