Do (+1)
Do
- Use TypeScript for type safety
- Validate all inputs with Zod
- Provide clear, actionable error messages
- Use environment variables for secrets
- Implement rate limiting for external APIs
- Add tool annotations for destructive operations
Don't
- Hardcode API keys or secrets
- Skip input validation
- Return raw error stack traces
- Create overly complex tool schemas
- Ignore rate limits on external services