Choose FFL Bridge when
You want explicit key scopes.
The storefront credential is origin-bound and search-only; order creation stays on your server.
FFL API comparison
Compare the safety boundary, not a stale feature count.
Provider pricing and product catalogs change. This page documents what the current FFL Bridge release actually implements and gives you the same questions to verify with any alternative.
| Decision area | FFL Bridge current release | What to verify elsewhere |
|---|---|---|
| Integration surfaces | REST API, origin-bound browser widget, and maintained WooCommerce 1.1.0 plugin | Confirm the currently maintained integrations directly with the provider |
| Browser credentials | Publishable ffl_pub_ keys restricted to dealer search and approved origins | Confirm whether browser-exposed keys have both scope and origin enforcement |
| Server credentials | Private ffl_live_ keys for backend search, orders, and account API operations | Confirm scope, rotation, and revocation behavior |
| Checkout eligibility | Search and order creation require an active dealer, transfer acceptance, and a current verified license | Confirm where and when dealer eligibility is revalidated |
| Directory model | Nationwide ATF directory is explicitly separate from the smaller verified checkout network | Confirm whether directory records and checkout-eligible records are distinguished |
| Free usage | 100 authenticated calls per day with a hard stop | Verify the provider’s current trial or free-plan terms |
| Paid usage | Published daily allowance plus durable Stripe-metered overage for private server keys; browser keys hard-stop | Verify current included usage, overage unit, and retry behavior |
| WooCommerce artifact | Public version 1.1.0 ZIP with a published SHA-256 checksum | Verify release source, supported versions, and update process |
Validate first when
Your checkout is highly customized.
Confirm your platform can store the selected dealer and call your backend before committing to a widget integration.
Ask every provider
What happens when data changes?
A selection must be revalidated at order submission, not trusted forever because it appeared in an earlier search.