Gateway Overview
Every partner API call enters through the integration gateway. The gateway decides whether the route exists, whether it needs a token, and whether your token carries the permission the route requires; only then does it forward the call to the integration service, which applies your client's own checks (certificate, IP allow-list, rate and usage limits) and runs the operation.