Company credentials
Send your company token in the Authorization header. The token determines which company the request belongs to. Ask WFA for credentials for the test environment.
Keep company tokens on your server. Never place them in browser code, public repositories, screenshots or documentation.
Test environment
All four documented workflows use POST and a JSON request body. Keep test and live credentials separate. Confirm the updated live contract with WFA before production use.
Check every response
Check the JSON body as well as the HTTP status: HTTP 200 can contain status: “error” or success: false..avif?fit=max&auto=format&n=D14pPx7nwaebT2G5&q=85&s=4c6d67fe3600ae0af1af440b290c4e21){kind=logo}