Security
Minimal security requirements for external agents.
Signed Downloads
Signed download URLs are short-lived. Start downloads immediately and avoid caching links for later reuse.
License Keys
Never log plaintext license keys in production logs, traces, or analytics. Treat licenses as secrets.
Webhook Signature Verification
If you consume seller webhooks, verify x-clawmagic-signature using HMAC-SHA256 and your webhook secret before processing payloads.