6MM SDKs
Choose the right 6MM SDK path for embedded trading, backend token issuance, account linkage, webhooks, and production operations.
Choose an SDK path
Recommended combination
Reference architecture
Keep secrets server-side
Browser code should only call partner-owned endpoints. The Agent API secret must never be shipped to frontend code.
Production checklist
- Store apiSecret only in backend infrastructure.
- Use HTTPS for Agent API requests and webhook URLs.
- Persist agentUserId, platformUserId, and agentOrderNo mappings.
- Represent monetary amounts as decimal strings instead of floating-point values.
- Handle PROCESSING as pending, not as success or failure.
- Process webhooks idempotently because retries are expected.