Browser Safe
ScottyWebClient accepts only same-origin HTTPS endpoints and approved response states.
Framework-neutral browser and Node server integration for Scotty mobile approval authentication. The browser stays same-origin; the protected website server calls Scotty.
The package is private while production acceptance continues. Install directly from GitHub from approved SEL repositories.
npm install github:Epiphane1772/scotty-web-sdk#codex/initial-sdk
ScottyWebClient accepts only same-origin HTTPS endpoints and approved response states.
SCOTTY_API_KEY belongs only in protected server configuration, never in JavaScript or HTML.
Symfony, PHP, Laravel, and Node/Express integration notes are maintained in the repository docs.
This static production surface exposes /health for infrastructure checks and does not expose credentials, phone numbers, tokens, or upstream diagnostics.