Security & operational hygiene
Phone numbers are personal data in many contexts. Prefer derived outputs (masking / hash) when you need correlation without storing raw values.
Recommendations
- Use mask_mode / options.mask.mode when you don’t need the full number.
- Use hash_enabled / options.hash.enabled for stable correlation in logs/CRM.
- Keep API keys out of shared scripts; load them from env vars in CI.
- Handle 429 with backoff; don’t retry aggressively on 5xx.
Client-side storage (web UI)
The UI stores the API key in sessionStorage so you don’t have to retype it. Clear site data to remove it.