Skip to main content
The API Secret Vault lets you securely store the credentials for external APIs and make them available to your agents. Once an API is connected, an agent can call it from execute_python — the proxy injects your secret into the request, so the credential never appears in agent code, logs, or chat history. This is what powers connectors used by Room Templates: when a template needs Crunchbase, PubMed, or Apify, those are API Secret Vault connections. Find it under Settings → Connectors → API Secret Vault.
API Secret Vault tab showing connected API cards and the preset catalog

​
How it works

When an agent makes an HTTP request to a connected API’s origin, Corvic’s proxy automatically attaches the stored credential to the correct header (or query parameter). Your agent’s code references the connection by name and never handles the raw secret.
1

Add a connection

Pick a service from the catalog (one click prefills the host and auth scheme) or add a custom origin manually.
2

Paste your credential

Enter the API key, token, or basic-auth value. Presets show the expected format (for example, Bearer sk-… or Basic <base64>).
3

Allowlist it for an agent

Grant specific agents access to the connection. From then on, the agent can call that API from execute_python.
Presets never carry a real secret — only the shape of the request (origin, header name, and an example value). Nothing sensitive ships in the product bundle; your credential is only stored when you enter it.

​
Connector catalog

The catalog includes one-click presets for 35+ common services, grouped by category. Each preset prefills the API origin and the correct authentication header so connecting is just “pick a service and paste your token.”
SalesforceHubSpotPipedriveZoho CRMCrunchbaseApollo.io
StripeQuickBooksPolygon.ioFinnhubSerpApi

SerpApi covers Google Finance, Patents, Search, and more.

PubMed (NCBI E-utilities)Epic on FHIROracle Health (Cerner)Health GorillaMedplum
DatabricksSupabaseSnowflake SQL APIHuggingFaceKaggle
SlackTwilioSendGrid
NotionAirtableLinearJiraGoogle Sheets
GitHubGitLabOpenAIAnthropicScrapflyApifyFirecrawl
MailchimpKlaviyoGoogle AnalyticsDataForSEO
Not in the catalog? Add a custom connection by entering any API origin, the header your service expects, and your credential. Anything reachable over HTTPS can be connected.

​
Authentication schemes

Different services authenticate differently; presets handle the details for you:

Room Templates

Templates that rely on these connectors.

Agents

Allowlist connections for an agent.

Python & SQL

Call connected APIs from agent code.