​

Security Features

​

Access Model

• Public API access is scoped through script-level rg_live_* keys.
• Dashboard actions are managed through authenticated website sessions.

​

Controls in Website

• key policies and lifecycle
• maintenance and message behavior
• country and access restrictions
• webhook-based monitoring

​

Best Practices

• Rotate rg_live keys periodically
• Revoke compromised keys immediately
• Keep operational/admin secrets separate from public integration keys