Skip to main content

​
Credentials

A credential stores how to authenticate with an API so tokens don’t live inside bots. Credentials are encrypted and never shown again. They live in Settings → Developers → Credentials. Available types:
  • API key: a key in a header or in the URL.
  • Bearer token: a fixed token in the Authorization header.
  • Username and password (Basic auth).
  • Secret headers: several headers with secret values.
  • OAuth · Client credentials: system to system, with client ID and secret; the token is requested and renewed automatically.
  • OAuth · Sign-in: you connect an account and the token renews automatically.
Each credential shows its status (Ready, Error, Needs connection), where it’s used and when it was last used. Deleting a credential in use tells you which steps or tools will stop authenticating.

​
HTTP tools

An HTTP tool is a saved request to your system: AI agents use it during the conversation, and bots and automations call it from their Call external system step. They live in Automation → Agents → Tools.
1

Start from a preset

Look up a value (GET with something the customer provides), Create a record (POST with JSON), Notify a webhook (Zapier, Make, n8n or your server) or From scratch.
2

Describe what it does

The name (lowercase, numbers and underscores) and the description are what the agent reads to decide when to use it.
3

Set up the request and its parameters

Method, URL, credential and the values that change on each call.
4

Test it before saving

Check the response and save. The card then shows calls and errors for the last 7 days.
Then turn it on in each agent that should use it.