Baseline checklist
- Store credentials and signing material in a managed secrets system; rotate them on a schedule your security team defines.
- Terminate TLS at the load balancer or edge; restrict administrative URLs where possible.
- Run backups for primary data stores; decide whether vector indexes need separate recovery steps.
- Wire logs, metrics, and traces as described in Observability.
Documentation site
This Mintlify project underdocs/ can ship through Mintlify or your own static pipeline. Regenerate the OpenAPI files on every API release so the API reference tab stays accurate—see For developers — OpenAPI.