# Appfolio Security Basics

> Secure AppFolio API credentials and tenant data. Trigger: "appfolio security".

- Skill: `jeremylongshore/appfolio-security-basics` (Agent Skill)
- Install (CLI): `npx skillmds@latest add jeremylongshore/appfolio-security-basics`
- Raw SKILL.md: https://api.skillmd.com/api/skills/jeremylongshore/appfolio-security-basics/raw
- Safety review: pending
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Security
- License: MIT
- Author: jeremylongshore (https://skillmd.com/u/jeremylongshore)
- Updated: 2026-09-08
- Page: https://skillmd.com/skills/jeremylongshore/appfolio-security-basics

---


# appfolio security basics | sed 's/\b\(.\)/\u\1/g'

## Security Checklist
- [ ] API credentials in secret manager (not .env in production)
- [ ] HTTPS enforced for all API calls
- [ ] Tenant PII logged only when necessary
- [ ] API credentials rotated periodically
- [ ] Access scoped to minimum required endpoints

## Secure Client Configuration
```typescript
import https from "https";
import axios from "axios";

const secureClient = axios.create({
  baseURL: process.env.APPFOLIO_BASE_URL,
  auth: { username: process.env.APPFOLIO_CLIENT_ID!, password: process.env.APPFOLIO_CLIENT_SECRET! },
  httpsAgent: new https.Agent({ minVersion: "TLSv1.2", rejectUnauthorized: true }),
});
```

## Resources

- [AppFolio Stack APIs](https://www.appfolio.com/stack/partners/api)
- [AppFolio Engineering Blog](https://engineering.appfolio.com)