Credentials API

Manage encrypted API credentials for external service connections.

List connected services

GET /api/credentials

Returns the list of credential keys that have stored credentials (no values).

Response:

{
  "connectedKeys": ["revenuecat", "sentry", "vercel"]
}

Save credentials

POST /api/credentials

Store encrypted credentials for a service.

Request body:

{
  "key": "sentry",
  "values": {
    "authToken": "sntrys_...",
    "orgSlug": "my-org"
  }
}

Delete credentials

DELETE /api/credentials

Remove stored credentials for a service.

Request body:

{
  "key": "sentry"
}

Test credentials

POST /api/credentials/test

Test credentials by making a lightweight API call to the service.

Request body:

{
  "key": "sentry",
  "values": {
    "authToken": "sntrys_...",
    "orgSlug": "my-org"
  }
}

Response:

{ "ok": true }

{ "ok": false, "error": "Sentry returned 401" }

OAuth redirect

GET /api/auth/{provider}/redirect

Initiates the OAuth authorization flow. Redirects the user to the provider’s authorization page.

Query params:

credKey: The credential store key (e.g., github)
scopes: Space-separated OAuth scopes

OAuth callback

GET /api/auth/{provider}/callback

Receives the OAuth authorization code, exchanges it for tokens, and stores them.

Automatically redirects to /settings?oauth=success or /settings?oauth=error.

Import from gws CLI (Google only)

POST /api/auth/gws-import

Import Google OAuth tokens from the @googleworkspace/cli local config.

Response:

{ "imported": true }

Overview

Data Endpoints

Management Endpoints

Credentials API

Credentials API

List connected services

GET /api/credentials

Save credentials

POST /api/credentials

Delete credentials

DELETE /api/credentials

Test credentials

POST /api/credentials/test

OAuth redirect

GET /api/auth/{provider}/redirect

OAuth callback

GET /api/auth/{provider}/callback

Import from gws CLI (Google only)

POST /api/auth/gws-import

​Credentials API

​List connected services

GET /api/credentials

​Save credentials

POST /api/credentials

​Delete credentials

DELETE /api/credentials

​Test credentials

POST /api/credentials/test

​OAuth redirect

GET /api/auth/{provider}/redirect

​OAuth callback

GET /api/auth/{provider}/callback

​Import from gws CLI (Google only)

POST /api/auth/gws-import

Credentials API

List connected services

Save credentials

Delete credentials

Test credentials

OAuth redirect

OAuth callback

Import from gws CLI (Google only)