Input Validation

​

Field Limits

​

String Fields

​

Numeric Fields

​

Request Limits

• Request body size: 10MB maximum
• Rate limit: 100 requests per minute per IP address

​

Input Requirements

​

Server Creation

• name: Unique per user

• description: empty string
• tokenExpiresInDays: no expiration
• restrictions:
• isPublic: false

​

Action Execution

• connectorId: Valid connector identifier (non-empty string)
• actionId: Valid action for the connector (non-empty string)
• parameters: Action-specific parameters (object)

• credentialId: 24-character MongoDB ObjectId for specific credential
• timeout: Custom timeout in milliseconds

​

Validation Rules

​

Server Names

• Must be unique per user
• Cannot be empty or whitespace only
• Special characters allowed: spaces, hyphens, underscores
• Cannot start or end with whitespace

"My Production Server"
"test-server-01"
"Customer_Support_Bot"

"" (empty)
"  " (whitespace only)
"server@123" (invalid character @)
"my-server-" (trailing hyphen)

​

API Keys

• Must be at least 16 characters
• Alphanumeric characters, underscores, and hyphens allowed
• Case-sensitive
• JWT tokens are also accepted as API keys

​

User IDs

• Must be a non-empty string
• Maximum 10,000 characters
• Any format accepted (MongoDB ObjectId, UUID, custom ID)

682a9d8bf35534170bcb457b  // MongoDB ObjectId
user_xyz789                // Custom ID
550e8400-e29b-41d4-a716    // UUID

​

Restrictions

{
  "connectors": {
    "mode": "allowlist" | "blocklist",
    "allowedIds": ["string"],     // Use with allowlist mode
    "blockedIds": ["string"]      // Use with blocklist mode
  },
  "actions": {
    "mode": "allowlist" | "blocklist",
    "allowedActions": ["string"], // Use with allowlist mode
    "blockedActions": ["string"]  // Use with blocklist mode
  },
  "users": {
    "mode": "allowlist" | "blocklist",
    "allowedIds": ["string"],     // Use with allowlist mode
    "blockedIds": ["string"]      // Use with blocklist mode
  }
}

​

Validation Errors

{
  "error": {
    "code": "VALIDATION_ERROR",
    "message": "Validation failed",
    "details": {
      "field": "name",
      "constraint": "maxLength",
      "value": 100,
      "message": "Server name must not exceed 100 characters"
    }
  }
}

​

Common Validation Errors

​

Type Coercion

• Strings to numbers: “100” → 100
• Numbers to strings: 123 → “123”
• Booleans: “true”/“false” → true/false

• Arrays and objects
• Null values
• Undefined values

​

Security Validation

​

Input Sanitization

• All user inputs are validated using Zod schemas
• Server IDs are generated from names with sanitization
• Special characters in names are converted to hyphens

​

Best Practices

1. Validate on client side for better UX
2. Handle validation errors gracefully
3. Use appropriate field types in requests
4. Respect field limits to avoid truncation
5. Sanitize user input before sending
6. Implement retry logic for validation errors