Service account for automation

Run integrations without a personal user password.

Create in PIM

1. Admin → Users → create integration user.
2. Assign least-privilege role (products view/edit, integration run — as needed).
3. Generate API credentials per your tenant setup.

Authenticate

curl -s -X POST "https://api.catazenta.com/v1/auth/login" \
  -H "Content-Type: application/json" \
  -d '{
    "email": "integration@yourcompany.com",
    "password": "SECURE_PASSWORD"
  }'

Store access_token in your secret manager; refresh before expiry.

MCP / CI

• Set CATAZENTA_USERNAME / CATAZENTA_PASSWORD for local MCP connector.
• In CI, obtain token in pipeline step; never commit secrets to git.

Security

• Rotate credentials quarterly
• Separate tenants for sandbox vs production
• Security guide