API validation
Schema-checked endpoints validate requests at the API boundary.
Security and data
Security for your integration
Review how credentials, team access and product data fit into your Claimr integration. Use this overview to identify what your team needs to confirm before launch.
Three areas to review
Access, data and integration
- Access
Who can act, and which credentials do they use?
- Data
What information is collected, retained and shared?
- Integration
How are product events and requests validated?
Documented controls
The controls to review
Confirm scope, availability and responsibilities with the team for your intended setup. This overview is not an independent security assessment.
Server-side credentials
Keep organization API keys and MCP secrets in trusted server-side integrations, outside browser code.
Request limits
Rate limiting and request validation apply to abuse-sensitive endpoints. Confirm the limits relevant to your integration.
Request tracing
Request IDs on API responses help your team trace requests and investigate issues.
Team permissions
Role-based access controls govern team and campaign management. Review the permissions each team member needs.
Data export and deletion
Review the scope of data export and deletion controls for the information your program collects.
Your integration review
Bring your requirements to the team
Share the product you are connecting, the data it needs and your evaluation requirements. Agree on the responsibilities for your setup before connecting production data.
- 01
Map the data flow
Identify the events, user information and connected services involved in your program.
- 02
Define access and permissions
List the people and systems that need access, including any assistant using MCP.
- 03
Confirm the data lifecycle
Discuss retention, export and deletion requirements, along with the evidence your reviewers need.
Supporting information
Continue your review
Explore the integration guides and published policies relevant to your setup.
API and SDK integration
Review event handling and the connection to your product.
MCP integration
Review the account permissions and actions available to your assistant.
Subprocessor information
The public list is a draft. Contact the team for current provider details.
Privacy policy
Read how Claimr describes its handling of personal information.