Linear personal API keys act as your user across every team and are server-only. Prefer OAuth applications with read-only scopes for integrations, and verify the Linear-Signature header on webhooks before acting on issue events.
Acts as your user with your full permissions.
Scoped access granted to an application.
Verifies the Linear-Signature HMAC.
Public roadmaps and status pages only need read access.
GraphQL lets you request exact fields, keeping payloads and complexity low.
Visitors can read private issues and create or edit work as you.
Forged events can trigger automations in your systems.
Store LINEAR_API_KEY in the vault and expose a cached pipeline that returns a slim list of public issues for roadmaps or status pages.
Yes. Personal keys inherit that user access, so prefer OAuth apps or a dedicated bot account.
You should not store Linear credentials in Frontend / Web client code. Linear API key stays in Vault; GraphQL POST runs on Workers. RealComposer Secret Vault injects headers on Cloudflare Workers so only your edge URL is public.
To merge linear issues with notion database tasks, use one RealComposer pipeline with parallel steps. Linear issues and Notion database rows returned as one timeline JSON. Your Frontend / Web app makes one request instead of several sequential upstream calls.
You should not store Linear credentials in React Native client code. iOS and Android call one edge URL for Linear issue lists. RealComposer Secret Vault injects headers on Cloudflare Workers so only your edge URL is public.
To solve merge linear issues and github pull requests into one dashboard api, never execute unauthenticated requests or embed private tokens directly in client bundles. RealComposer acts as a sub-10ms edge gateway running on Cloudflare Workers that securely injects credentials from your Secret Vault, normalizes responses, and prevents unauthorized API usage. Route calls through your RealComposer edge URL to guarantee complete privacy, robust origin validation, and low mobile latency.
To combine linear with github project board api, use one RealComposer pipeline with parallel steps. Upgraded multi-step Linear GraphQL plus GitHub repos (replaces single-step batch1). Your Frontend / Web app makes one request instead of several sequential upstream calls.
Linear payloads are heavy for React Native. Pick issue id title state assignee from GraphQL response. RealComposer output mapping returns only the fields your UI needs at the edge.
GraphQL is a query language and runtime for APIs in which clients send a query describing exactly the fields they need, and the server returns JSON matching that shape. A strongly typed schema defines available data, and a single endpoint replaces many REST routes.
Webhook Signature VerificationWebhook signature verification is validating that an incoming webhook was sent by the expected provider and was not altered. Providers sign each payload with a shared secret, typically using HMAC-SHA256, and your endpoint recomputes the signature and compares it before trusting the event.
Principle of Least PrivilegeThe principle of least privilege states that every user, service, and credential should have only the minimum permissions required to perform its task. For APIs, this means using restricted keys, narrow OAuth scopes, and client tokens limited to specific endpoints.