Skip to main content

Inttegro .NET SDK

The Inttegro .NET SDK builds server-side integrations with nullable-aware domain types, public enum constants, asynchronous resource methods, and cancellation support.

Start with MCP

Before writing SDK code, connect your MCP client and ask MCP to design the integration for your .NET application. Use the resulting implementation and test plan to guide the code you write with this SDK.

Install

The SDK targets .NET 8. NuGet publication is being configured; until it is available, use the signed release artifacts on GitHub.

Keep the SDK on the server

Load the secret API key securely from server-side code. Never package the key in a desktop or mobile application, browser code, or source control.

Create a client

using Inttegro;

var apiKey = Environment.GetEnvironmentVariable("INTTEGRO_API_KEY")
    ?? throw new InvalidOperationException("INTTEGRO_API_KEY is required");

using var inttegro = new InttegroClient(apiKey);

Resource methods return domain objects directly and support CancellationToken for request cancellation and deadlines.

Observability

Register the SDK's ActivitySource with the OpenTelemetry pipeline owned by your application. The same source can also be consumed directly with the .NET diagnostics API:

using System.Diagnostics;
using Inttegro;

using var listener = new ActivityListener
{
    ShouldListenTo = source => source.Name == InttegroClient.ActivitySourceName,
    Sample = (ref ActivityCreationOptions<ActivityContext> _) =>
        ActivitySamplingResult.AllDataAndRecorded,
    ActivityStopped = activity =>
    {
        _ = activity; // Forward the completed activity to your tracing pipeline.
    },
};
ActivitySource.AddActivityListener(listener);

Inttegro emits vendor-neutral OpenTelemetry spans through the provider configured by your application. The SDK does not choose an exporter or observability vendor, and it does not send telemetry by itself.

Each public SDK call creates one CLIENT span named after the logical operation, such as inttegro.orders.create. HTTP attempts, retries, response receipt, decoding, and failures appear as events on that span. W3C trace context is propagated on outbound requests.

Span attributes and data-safety contract

The stable attributes are:

  • inttegro.operation.name, SDK language and SDK version
  • HTTP method and response status when available
  • destination host and the static API route template
  • the safe request identifier returned by the API
  • a low-cardinality failure category such as a timeout

SDK telemetry never records API keys, authorization headers, request or response bodies, customer or payment data, resource identifiers, dynamic URLs, query strings, exception messages, or stack traces.

To turn off Inttegro instrumentation for a client, use telemetryEnabled: false.

Report SDK failures​

Pass an application-owned callback to receive one immutable, typed report after an SDK operation finally fails:

using Inttegro;
using Inttegro.Diagnostics;

ErrorReporter enqueueError = report =>
{
    _ = report; // Forward the report to your collector or queue.
};

using var inttegro = new InttegroClient(
    apiKey: Environment.GetEnvironmentVariable("INTTEGRO_API_KEY")!,
    errorReporter: enqueueError
);

The default policy reports transport, timeout, decoding, SDK, unknown, and server-side failures. Expected API failures such as normal 4xx responses stay with the caller. Use errorReportingPolicy: ErrorReportingPolicy.All when the collector should receive those failures too. Cancellation is never reported.

Report fields and data-safety contract

A report contains:

  • the logical operation, static route, server host, status, duration, and safe request identifier when available
  • safe API error codes and a stable, low-cardinality fingerprint
  • SDK identity, exception type, and active trace identifiers

Reports never contain API keys, authorization headers, request or response bodies, customer or payment data, resource identifiers, dynamic URLs, query strings, exception messages, or stack traces.

Reporting is completely opt-in. Unless errorReporter is configured, the SDK does no reporting-specific timing or metadata preparation, creates no event ID or report object, and serializes nothing. Report construction and collector failures are isolated, so the caller still receives the original SDK failure.

Continue