Integrations

Use API and webhook credentials

Understand how external systems authenticate.

How to do it

Create credentials only from the supported Integration settings.
Limit scope to the BU and actions required by the integration.
Store secrets in the server-side secret manager and rotate after a staff or vendor change.

Never put private credentials into public page JavaScript.

Audit the first successful write and error handling before production traffic.

Tell us your BU code and the step where you got stuck. Do not include passwords, BU PINs, tokens or recovery codes.