Developer & API Terms
Terms governing developer credentials, integrations, API usage, automation and technical access.
1. Limited Licence
Subject to approval and compliance, X2 grants a limited, revocable, non-transferable right to use authorized APIs and developer tools for the approved application and scopes.
2. Credentials and OAuth
API keys, secrets, tokens and OAuth credentials must be protected. Applications should request the minimum permissions necessary and must not collect third-party passwords where authorized OAuth or API methods are available.
3. Scopes and Permissions
Read, write and sensitive operations are separate permissions. Access to Catalog does not automatically grant Rights, Distribution, Finance or other access.
4. Prohibited API Use
Developers must not bypass scopes, rate limits or usage controls, scrape prohibited data, reverse engineer restricted systems, access other customers' data, resell unauthorized access or use APIs for unlawful surveillance or fraud.
5. Rate Limits and Usage
X2 may apply call, data, storage, compute, automation, concurrency or other limits to protect service reliability and allocate usage fairly.
6. Usage-Based Charges
API charges may depend on calls, data volume, compute, storage, premium endpoints, automation volume, AI verification or enterprise requirements. Attempts to circumvent metering may result in suspension.
7. Data and Customer Content
Developers may process only data authorized for the application and must implement appropriate retention, security and deletion controls. X2 proprietary datasets, fraud models and unrelated customer data are not included in ordinary API access.
8. Security
Developers must follow reasonable security practices, rotate compromised credentials and promptly report suspected unauthorized access.
9. Versioning
X2 may introduce new API versions, deprecate older versions and change scopes where necessary for security, privacy, architecture or provider requirements. Reasonable notice may be provided for material breaking changes where practicable.
10. Availability
API availability may depend on service, territory, verification, provider connections and infrastructure. Sandbox access does not automatically imply production approval.
11. Suspension and Termination
X2 may suspend a specific API credential or application without necessarily suspending the customer's entire X2 account where the issue is limited to developer access.