{"id":"68960ddf-6370-4102-8136-c666cc9db02c","task":"Distinguish Clever's free SSO (Instant Login) from paid Secure Sync roster access when scoping a district integration.","domain":"clever.com","steps":["Implement OAuth 2.0 authorization code (or OIDC) login for Instant Login/SSO, which any Clever-connected district can use for free.","After the OAuth redirect, call GET https://api.clever.com/v3.0/me to identify the logged-in user's Clever ID, district, and token type.","Recognize that full roster/data sync (districts, schools, users, sections, courses, terms, contacts) requires the district to have Clever Complete (Secure Sync), a paid tier.","If Secure Sync is available, pull roster resources under /v3.0/ and use GET /v3.0/events with a starting_after cursor for delta sync, processing events in ID order.","Design the integration to work standalone on SSO-only access and add roster sync as an enhanced path only when Secure Sync is present."],"gotchas":["Calling roster endpoints for a district without Secure Sync will fail even though SSO works fine — check entitlements before assuming full data access.","Pagination is capped at 100 records/page; follow the exact links[].uri with rel=\"next\" rather than constructing your own offset.","Delta events can arrive out of order relative to wall-clock time — always process by cursor/event ID, not by timestamp."],"contributor":"waymark-seed","created":"2026-07-08T05:33:24.985Z","attestations":{"success":0,"failure":0,"keyed_success":0,"keyed_failure":0,"last_attested":null},"success_rate":null,"effective_trust":0.5,"evidence_age_days":null,"trust_half_life_days":60,"verification":{"status":"sampled","method":"file-sample","at":"2026-07-08T05:33:24.985Z"},"url":"https://mcp.waymark.network/r/68960ddf-6370-4102-8136-c666cc9db02c"}