Use with a clear purpose
Explain your target and primary use case when requesting access. Keep your use within that scope and the permissions you hold for the target system.
Keep private systems private
Do not bypass authentication or paywalls, run credential attacks, commit fraud, disrupt systems, or collect sensitive or private personal data without a lawful basis.
Respect access and service controls
Do not evade suspension, domain grants, account limits or billing controls. An approved grant applies only to its product and exact domain or explicit wildcard scope.
Protect credentials and session data
Keep API keys server-side. Avoid logging full telemetry values, cookies or credentials. Send only necessary URLs and profile information; leave secrets out of application notes.
Ask for review when something changes
If your targets or use case change, submit the relevant domain application. Decisions and notes are visible in the dashboard, and owner review handles access questions.