The REST API, API clients, and webhooks — Good to know

• A client secret is shown once and never again — if you lose it, revoke the client and create a new one rather than hunting for it. • A client secret carries admin-grade access to its whole workspace with no per-record checks, so keep it server-side and treat it like a password. • Lookup and Rollup fields are computed: the API rejects writing them and can't create them either — wire those in the field editor. • Field-value filters scan at most 5,000 rows per request; when the response sets scannedCap, narrow the filter or page through instead of trusting one call to see everything. • A webhook that answers with a 4xx isn't retried, and 20 straight failures pause it — watch Recent webhook deliveries and press Enable after fixing your endpoint.