@korve-dev/sdk is server-only. Korve injects a project-and-environment-scoped runtime token and
delivery secret; never substitute an organization API key or bundle the SDK into browser code.
message.id; the SDK verifies
the timestamp and signature, but your application owns business-level deduplication. sendBatch
accepts up to 100 messages in one atomic request. korve.cache("sessions") returns the injected TLS
connection string for a ready cache.
The same client exposes:
The runtime token fixes project and environment server-side; method arguments cannot override that
scope. Signed URLs, cache connection strings, and realtime capabilities are secrets. Never persist
or log them.
See Queues, Storage,
Realtime, AI Gateway,
Customer payments, and Caches.