Credentials by provider
Summary
Every provider key is entered in Settings → Credentials → Add credential and stored encrypted. This table shows what each one asks for and where it is selected afterwards.
Reference table
| Credential | Fields (* required) | Where it is used | Product |
|---|---|---|---|
| WhatsApp Cloud API | WABA ID*, App ID*, Access Token*, App Secret* | Channels → WhatsApp → WhatsApp app | Both |
| OpenAI | API Key* | AI connections → AI Model | Both |
| Google Gemini | API Key* | AI connections → AI Model | Both |
| Twilio | Account SID*, Auth Token*; optional: API Key SID + API Key Secret (together), Termination URI, SIP Trunk SID, SIP Trunk Auth Username, SIP Trunk Auth Password | AI connections → Twilio account | Prospecting |
| Retell AI | API Key* | AI connections → Voice | Prospecting |
| Shopify | Shop Domain*; Client ID + Client Secret, or Admin API Access Token (legacy apps) | Sync | Both |
| Ecwid | Store ID*, Secret API Token* | Sync | Both |
| Clientify | API Key* | Sync | Both |
| Supabase | Project URL*, Secret Key* | Sync | Both |
| SIIGO | API user (email)*, Access Key*, Partner-Id* | Sync (read-only) | Both |
| Google Sheets | Spreadsheet ID*, Service Account Email*, Private Key* | Sync | Both |
| Generic API (HTTP) | Base URL*, API Key / Token*, Auth Header Name | Sync | Both |
Coming soon (visible in the vault, not yet configurable): HubSpot, Brevo, Bitrix24, SAP, WooCommerce, WordPress, Google Calendar and Outlook Calendar.
No credential in the vault: Facebook Messenger, Instagram and Meta Lead Ads are connected with Connect with Facebook in Channels.
Notes
- Test validates the credential against the provider before you use it.
- Shopify needs the read permissions
read_customers,read_productsandread_orders; to send data, alsowrite_customersandwrite_products. - Keys are not shown again once saved.
- More detail in Credentials.