Ownership and runbook
Owner: Platform Security. Runbook: RB-API-SECURITY-OPS-001. Developer apps map one credential to one bounded set of scopes, tenants, and country cells.
Developer preview API v1
Sandbox only. No real funds moved. No production access is granted here. Access requirements
Least privilege
Grant each client the narrowest useful scope
Developer-app credentials are scoped to one programme, country cell, and set of operations, with no client-chosen authority.
Least-privilege scopes
Request only the scopes your integration needs. A developer app for aggregator agg-zm-dc1-demo receives payment and refund scope for that programme, never a wider tenant or an unrelated merchant.
Prohibited
Never mint a shared or multi-tenant credential, grant a client the ability to select a merchant or execution mode, or place a live credential in a public client. Review scope grants whenever the integration changes.