API Keys

sk_live_abc123def456ghi789...  # Production key
sk_test_abc123def456ghi789...  # Test key

Instance → Service → Entity → Operations

production:
  API_BUSINESS_PARTNER:
    A_BusinessPartner:
      - list
      - get
    A_BusinessPartnerAddress:
      - list
      - get

dev:
  API_BUSINESS_PARTNER:
    A_BusinessPartner:
      - list
      - get
      - create
      - update
      - delete

production:
  API_BUSINESS_PARTNER:
    "*":
      - list
      - get

rate_limits:
  per_minute: 120
  per_day: 50000

X-RateLimit-Limit: 60
X-RateLimit-Remaining: 45
X-RateLimit-Reset: 1640000000

import { RateLimitError } from 's4kit';

try {
  await client.A_BusinessPartner.list();
} catch (error) {
  if (error instanceof RateLimitError) {
    // Wait and retry
    await sleep(error.retryAfter * 1000);
    await client.A_BusinessPartner.list();
  }
}

// Support multiple keys during rotation
const client = new S4Kit({
  apiKey: process.env.S4KIT_API_KEY_NEW || process.env.S4KIT_API_KEY
});

# .gitignore
.env
.env.local
.env.*.local

// Good
const client = new S4Kit({
  apiKey: process.env.S4KIT_API_KEY
});

// Bad - never hardcode keys
const client = new S4Kit({
  apiKey: 'sk_live_abc123...'
});

permissions:
  production:
    API_SALES_ORDER_SRV:
      A_SalesOrder: [list, get]
      A_SalesOrderItem: [list, get]
rate_limits:
  per_minute: 30
  per_day: 5000

permissions:
  production:
    API_BUSINESS_PARTNER:
      "*": [list, get, create, update]
    API_SALES_ORDER_SRV:
      "*": [list, get, create, update]
rate_limits:
  per_minute: 120
  per_day: 50000

permissions:
  sandbox:
    "*":
      "*": [list, get, create, update, delete]
rate_limits:
  per_minute: 60
  per_day: 10000