Best Practice (All Languages)

After verification:

If subscription inactive → return 403 Forbidden

If active → allow tool access

Always store session locally

FireAPI gives identity verification, but your tool must manage:

local sessions

JWT cookies

user state

📌 Recommended Tool URL Format

When registering your tool in FireAPI Marketplace, use:

https://yourtool.com/auth/sso

FireAPI will append:

?token=xxxxx

Modified at 2026-03-26 18:05:30