# klikit developers

## Docs

- [Authentication](https://developer.klikit.io/partner-api/authentication.md): HTTP Basic with a partner key + secret, scoped per business.
- [Response envelope](https://developer.klikit.io/partner-api/concepts/envelope.md): Every Partner API response uses the same outer shape.
- [Environments](https://developer.klikit.io/partner-api/concepts/environments.md): Development is your sandbox. There is no separate sandbox.
- [Error codes](https://developer.klikit.io/partner-api/concepts/errors.md): Stable machine-readable error codes returned by the Partner API.
- [Idempotency](https://developer.klikit.io/partner-api/concepts/idempotency.md): Send Idempotency-Key on every write to make retries safe.
- [Scopes](https://developer.klikit.io/partner-api/concepts/scopes.md): What each credential is allowed to do.
- [Node receiver (reference)](https://developer.klikit.io/partner-api/examples/node-receiver.md): Minimal Express server that verifies, dedupes, and acknowledges klikit webhook events.
- [Python receiver (reference)](https://developer.klikit.io/partner-api/examples/python-receiver.md): Minimal Flask server that verifies, dedupes, and acknowledges klikit webhook events.
- [Introduction](https://developer.klikit.io/partner-api/introduction.md): Build POS, ERP, and back-office integrations against klikit's order, menu, and inventory surfaces.
- [Quickstart](https://developer.klikit.io/partner-api/quickstart.md): From zero to your first authenticated call in 5 minutes.
- [Event catalogue](https://developer.klikit.io/partner-api/webhooks/events.md): What each webhook means, when it fires, what the payload looks like.
- [Webhooks overview](https://developer.klikit.io/partner-api/webhooks/overview.md): How klikit pushes order events to a URL you host.
- [Troubleshooting webhooks](https://developer.klikit.io/partner-api/webhooks/troubleshooting.md): Symptom → cause table for the failures we see most often.
- [Verify signatures](https://developer.klikit.io/partner-api/webhooks/verify.md): HMAC-SHA256 of the raw body, compared in constant time.

## OpenAPI Specs

- [openapi](https://developer.klikit.io/partner-api/api-reference/openapi.yaml)