Credentials
What it is for
Credentials is the vault where the workspace stores, encrypted, the keys to external services: WhatsApp, OpenAI or Gemini, Twilio, Retell, and the stores and CRMs that are synced. The other screens (Channels, AI connections, Sync) do not ask for keys: they pick a credential from this vault.
How to get there
Settings → Credentials · app.growtek.io/en/settings/credentials
The screen in detail
- Add credential: opens Choose a credential type, with a search box and the types grouped into Channels, CRM, E-commerce, ERP, Spreadsheets, Calendar, LLM, Voice and API. The ones that cannot be configured yet show Coming soon.
- The list of saved credentials, each with its Name.
- The Provider status card (Retell and Twilio balance; see Balance alerts).
Available credential types
| Type | Category | Fields (* required) |
|---|---|---|
| WhatsApp Cloud API | Channels | WABA ID*, App ID*, Access Token*, App Secret* |
| OpenAI | LLM | API Key* |
| Google Gemini | LLM | API Key* |
| Twilio | Voice | Account SID*, Auth Token* (optional: API Key SID and API Key Secret —they go together—, Termination URI, SIP Trunk SID, SIP Trunk Auth Username and Password) |
| Retell AI | Voice | API Key* |
| Shopify | E-commerce | Shop Domain* and either Client ID + Client Secret, or the Admin API Access Token (legacy apps) |
| Ecwid | E-commerce | Store ID*, Secret API Token* |
| Clientify | CRM | API Key* |
| Supabase | CRM | Project URL*, Secret Key* |
| SIIGO | ERP | API user (email)*, Access Key*, Partner-Id* |
| Google Sheets | Spreadsheets | Spreadsheet ID*, Service Account Email*, Private Key* |
| Generic API (HTTP) | API | Base URL*, API Key / Token*, Auth Header Name (default Authorization) |
Coming soon (visible, but not configurable yet): HubSpot, Brevo, Bitrix24, SAP, WooCommerce, WordPress, Google Calendar and Outlook Calendar.
Messenger, Instagram and Meta Lead Ads do not use the vault: they connect with Connect with Facebook from Channels.
What you can do
Add a credential
- Click Add credential.
- Choose the type.
- Fill in the fields (and a Name to recognize it).
- Click Test to validate it against the provider.
- Click Save.
How to verify: Test replies Connection with … verified — the credential is valid and active. For providers without a live test it says Credential saved. Live verification is not yet available for this provider.
Credentials are stored encrypted and are never shown again. To change them, replace them with a new one. Each workspace uses its own keys and pays for its own usage.
Shopify: which permissions the app needs
The Shopify test checks the app's permissions. The read scopes
read_customers, read_products and read_orders are required (without them
the test fails). The write scopes write_customers and write_products are
needed to send data to Shopify; if they are missing, the test passes with a
warning. The form includes the help Where to find the Client ID and Client
Secret.
Use the credential
| Credential | Where it is chosen |
|---|---|
| WhatsApp Cloud API | Channels → WhatsApp → WhatsApp app |
| OpenAI / Google Gemini | AI connections → AI Model |
| Twilio | AI connections → Twilio account |
| Retell AI | AI connections → Voice |
| Stores, CRMs, ERP, Sheets, API | Sync → Connection |
Required permissions
| Action | Permission |
|---|---|
| View credentials and the provider status | integrations.read |
| Add, test and delete credentials | integrations.manage |