Marketplace-ready starter: OAuth (server-only), encrypted tokens in MongoDB, verified webhooks, rate-limited GHL API client, and a small dashboard.
Set environment variables (see Railway). Register redirect /api/oauth/callback and webhook /api/webhooks/inbound in the GHL app settings. GHL_REDIRECT_URI and the GHL field must be identical.