> ## Documentation Index
> Fetch the complete documentation index at: https://docs.corvic.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# API Secret Vault

> Securely connect external APIs so your agents can call them from code.

The **API Secret Vault** lets you securely store the credentials for external APIs and make them available to your agents. Once an API is connected, an agent can call it from `execute_python` — the proxy injects your secret into the request, so the credential never appears in agent code, logs, or chat history.

This is what powers connectors used by [Room Templates](/features/room-templates): when a template needs Crunchbase, PubMed, or Apify, those are API Secret Vault connections.

Find it under **Settings → Connectors → API Secret Vault**.

<Frame>
  <img src="https://mintcdn.com/corvicinc/E09Qw1MOZESGbjrM/images/api-secret-vault.png?fit=max&auto=format&n=E09Qw1MOZESGbjrM&q=85&s=fb7cc70e91408b10f1331e8dd0cbe516" alt="API Secret Vault tab showing connected API cards and the preset catalog" width="885" height="1284" data-path="images/api-secret-vault.png" />
</Frame>

## How it works

When an agent makes an HTTP request to a connected API's origin, Corvic's proxy automatically attaches the stored credential to the correct header (or query parameter). Your agent's code references the connection by name and never handles the raw secret.

<Steps>
  <Step title="Add a connection">
    Pick a service from the catalog (one click prefills the host and auth scheme) or add a custom origin manually.
  </Step>

  <Step title="Paste your credential">
    Enter the API key, token, or basic-auth value. Presets show the expected format (for example, `Bearer sk-…` or `Basic <base64>`).
  </Step>

  <Step title="Allowlist it for an agent">
    Grant specific agents access to the connection. From then on, the agent can call that API from `execute_python`.
  </Step>
</Steps>

<Note>
  Presets never carry a real secret — only the **shape** of the request (origin, header name, and an example value). Nothing sensitive ships in the product bundle; your credential is only stored when you enter it.
</Note>

## Connector catalog

The catalog includes one-click presets for 35+ common services, grouped by category. Each preset prefills the API origin and the correct authentication header so connecting is just "pick a service and paste your token."

<AccordionGroup>
  <Accordion title="Sales & CRM" icon="handshake">
    <div className="connector-grid">
      <span className="connector-chip"><img src="https://www.google.com/s2/favicons?domain=salesforce.com&sz=64" alt="" />Salesforce</span>
      <span className="connector-chip"><img src="https://www.google.com/s2/favicons?domain=hubspot.com&sz=64" alt="" />HubSpot</span>
      <span className="connector-chip"><img src="https://www.google.com/s2/favicons?domain=pipedrive.com&sz=64" alt="" />Pipedrive</span>
      <span className="connector-chip"><img src="https://www.google.com/s2/favicons?domain=zoho.com&sz=64" alt="" />Zoho CRM</span>
      <span className="connector-chip"><img src="https://www.google.com/s2/favicons?domain=crunchbase.com&sz=64" alt="" />Crunchbase</span>
      <span className="connector-chip"><img src="https://www.google.com/s2/favicons?domain=apollo.io&sz=64" alt="" />Apollo.io</span>
    </div>
  </Accordion>

  <Accordion title="Finance" icon="dollar-sign">
    <div className="connector-grid">
      <span className="connector-chip"><img src="https://www.google.com/s2/favicons?domain=stripe.com&sz=64" alt="" />Stripe</span>
      <span className="connector-chip"><img src="https://www.google.com/s2/favicons?domain=quickbooks.intuit.com&sz=64" alt="" />QuickBooks</span>
      <span className="connector-chip"><img src="https://www.google.com/s2/favicons?domain=polygon.io&sz=64" alt="" />Polygon.io</span>
      <span className="connector-chip"><img src="https://www.google.com/s2/favicons?domain=finnhub.io&sz=64" alt="" />Finnhub</span>
      <span className="connector-chip"><img src="https://www.google.com/s2/favicons?domain=serpapi.com&sz=64" alt="" />SerpApi</span>
    </div>

    <p>SerpApi covers Google Finance, Patents, Search, and more.</p>
  </Accordion>

  <Accordion title="Healthcare" icon="heart-pulse">
    <div className="connector-grid">
      <span className="connector-chip"><img src="https://www.google.com/s2/favicons?domain=ncbi.nlm.nih.gov&sz=64" alt="" />PubMed (NCBI E-utilities)</span>
      <span className="connector-chip"><img src="https://www.google.com/s2/favicons?domain=epic.com&sz=64" alt="" />Epic on FHIR</span>
      <span className="connector-chip"><img src="https://www.google.com/s2/favicons?domain=oracle.com&sz=64" alt="" />Oracle Health (Cerner)</span>
      <span className="connector-chip"><img src="https://www.google.com/s2/favicons?domain=healthgorilla.com&sz=64" alt="" />Health Gorilla</span>
      <span className="connector-chip"><img src="https://www.google.com/s2/favicons?domain=medplum.com&sz=64" alt="" />Medplum</span>
    </div>
  </Accordion>

  <Accordion title="Databases & Data" icon="database">
    <div className="connector-grid">
      <span className="connector-chip"><img src="https://www.google.com/s2/favicons?domain=databricks.com&sz=64" alt="" />Databricks</span>
      <span className="connector-chip"><img src="https://www.google.com/s2/favicons?domain=supabase.com&sz=64" alt="" />Supabase</span>
      <span className="connector-chip"><img src="https://www.google.com/s2/favicons?domain=snowflake.com&sz=64" alt="" />Snowflake SQL API</span>
      <span className="connector-chip"><img src="https://www.google.com/s2/favicons?domain=huggingface.co&sz=64" alt="" />HuggingFace</span>
      <span className="connector-chip"><img src="https://www.google.com/s2/favicons?domain=kaggle.com&sz=64" alt="" />Kaggle</span>
    </div>
  </Accordion>

  <Accordion title="Communication" icon="comment">
    <div className="connector-grid">
      <span className="connector-chip"><img src="https://www.google.com/s2/favicons?domain=slack.com&sz=64" alt="" />Slack</span>
      <span className="connector-chip"><img src="https://www.google.com/s2/favicons?domain=twilio.com&sz=64" alt="" />Twilio</span>
      <span className="connector-chip"><img src="https://www.google.com/s2/favicons?domain=sendgrid.com&sz=64" alt="" />SendGrid</span>
    </div>
  </Accordion>

  <Accordion title="Productivity" icon="list-check">
    <div className="connector-grid">
      <span className="connector-chip"><img src="https://www.google.com/s2/favicons?domain=notion.so&sz=64" alt="" />Notion</span>
      <span className="connector-chip"><img src="https://www.google.com/s2/favicons?domain=airtable.com&sz=64" alt="" />Airtable</span>
      <span className="connector-chip"><img src="https://www.google.com/s2/favicons?domain=linear.app&sz=64" alt="" />Linear</span>
      <span className="connector-chip"><img src="https://www.google.com/s2/favicons?domain=atlassian.com&sz=64" alt="" />Jira</span>
      <span className="connector-chip"><img src="https://www.google.com/s2/favicons?domain=google.com&sz=64" alt="" />Google Sheets</span>
    </div>
  </Accordion>

  <Accordion title="Developer" icon="code">
    <div className="connector-grid">
      <span className="connector-chip"><img src="https://www.google.com/s2/favicons?domain=github.com&sz=64" alt="" />GitHub</span>
      <span className="connector-chip"><img src="https://www.google.com/s2/favicons?domain=gitlab.com&sz=64" alt="" />GitLab</span>
      <span className="connector-chip"><img src="https://www.google.com/s2/favicons?domain=openai.com&sz=64" alt="" />OpenAI</span>
      <span className="connector-chip"><img src="https://www.google.com/s2/favicons?domain=anthropic.com&sz=64" alt="" />Anthropic</span>
      <span className="connector-chip"><img src="https://www.google.com/s2/favicons?domain=scrapfly.io&sz=64" alt="" />Scrapfly</span>
      <span className="connector-chip"><img src="https://www.google.com/s2/favicons?domain=apify.com&sz=64" alt="" />Apify</span>
      <span className="connector-chip"><img src="https://www.google.com/s2/favicons?domain=firecrawl.dev&sz=64" alt="" />Firecrawl</span>
    </div>
  </Accordion>

  <Accordion title="Marketing" icon="bullhorn">
    <div className="connector-grid">
      <span className="connector-chip"><img src="https://www.google.com/s2/favicons?domain=mailchimp.com&sz=64" alt="" />Mailchimp</span>
      <span className="connector-chip"><img src="https://www.google.com/s2/favicons?domain=klaviyo.com&sz=64" alt="" />Klaviyo</span>
      <span className="connector-chip"><img src="https://www.google.com/s2/favicons?domain=google.com&sz=64" alt="" />Google Analytics</span>
      <span className="connector-chip"><img src="https://www.google.com/s2/favicons?domain=dataforseo.com&sz=64" alt="" />DataForSEO</span>
    </div>
  </Accordion>
</AccordionGroup>

<Tip>
  Not in the catalog? Add a **custom** connection by entering any API origin, the header your service expects, and your credential. Anything reachable over HTTPS can be connected.
</Tip>

## Authentication schemes

Different services authenticate differently; presets handle the details for you:

| Scheme          | How the secret is sent          | Example services                                                                   |
| --------------- | ------------------------------- | ---------------------------------------------------------------------------------- |
| Bearer token    | `Authorization: Bearer <token>` | OpenAI, Stripe, HubSpot, Slack                                                     |
| Custom header   | A service-specific header       | Anthropic (`x-api-key`), Crunchbase (`X-cb-user-key`), Finnhub (`X-Finnhub-Token`) |
| Basic auth      | `Authorization: Basic <base64>` | Kaggle, Twilio, Jira, DataForSEO                                                   |
| Query parameter | Key passed as a URL query param | SerpApi, PubMed, Scrapfly                                                          |

## Related Documentation

<CardGroup cols={2}>
  <Card title="Room Templates" icon="rocket" href="/features/room-templates">
    Templates that rely on these connectors.
  </Card>

  <Card title="Agents" icon="robot" href="/features/agents">
    Allowlist connections for an agent.
  </Card>

  <Card title="Python & SQL" icon="python" href="/features/python-sql">
    Call connected APIs from agent code.
  </Card>
</CardGroup>