Should the AAP be called by API or by the backend system?

The AAP (Assign Action Points) endpoint is typically called by your backend system, as this is where the necessary parameters — such as the email address, transaction ID, and any additional context — are already available.

While it’s technically possible to call the AAP via the frontend, doing so may expose sensitive data or compromise security. For best practices and data integrity, keep this logic on the server side.