Feishu Integration Developer

Create an app on the Feishu Open Platform, then use the official Lark SDK's im.message.create API with msg_type 'interactive' and card JSON. Validate the card in Feishu's Card Builder tool before sending, and register a CardActionHandler to process button clicks.

tenant_access_token acts on behalf of the app for organization-level operations, while user_access_token acts on behalf of a specific user and is required for endpoints operating on personal data like a user's approval instances. User tokens are obtained through the OAuth authorization code flow.

Verify requests using the verification token or decrypt payloads with the Encrypt Key via the SDK's EventDispatcher. Return HTTP 200 within 3 seconds and process events asynchronously, since Feishu retries on timeout and may deliver duplicate events, so handlers must be idempotent.

Yes, the appTableRecord.batchCreate endpoint creates multiple records in one request, limited to 500 records per call. Larger datasets must be split into batches, and adding a short delay between batches helps avoid rate limiting (HTTP 429).

Every Feishu API response includes a code field where anything other than 0 indicates an error, with details in the msg field. Common causes include expired tokens, missing permission scopes, or wrong token type, so always check the code and implement retries for transient failures.

No, because the app_secret must never appear in frontend code. Browser-based calls must be proxied through your own backend, which authenticates the user first and then calls the Feishu API on their behalf.