Developer Agreement

Apps on AURA must respect user privacy, honor OAuth scopes, and only request permissions required for stated functionality. Live mode and advanced scopes require App Review approval.

Data use

Slam Book, Auragram, Marketplace, and Business data accessed via Graph or webhooks may not be sold, transferred to ad networks, or used to train third-party models without explicit user consent and platform approval.

Webhooks

Endpoints must use HTTPS, verify X-Aura-Signature-256, and respond within 10 seconds. Failed deliveries are retried with exponential backoff up to five attempts.

Rate limits

Default API keys are limited per hour per app. Contact platform support for elevated limits after review.