> ## Documentation Index
> Fetch the complete documentation index at: https://docs.corvic.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# API Secret Vault

> Securely connect external APIs so your agents can call them from code.

The **API Secret Vault** lets you securely store the credentials for external APIs and make them available to your agents. Once an API is connected, an agent can call it from `execute_python`: the proxy injects your secret into the request, so the credential never appears in agent code, logs, or chat history.

This is what powers connectors used by [Room Templates](/features/room-templates): when a template needs Crunchbase, PubMed, or Apify, those are API Secret Vault connections.

Find it under **Settings → Connectors → API Secret Vault**.

<Frame>
  <img src="https://mintcdn.com/corvicinc/E09Qw1MOZESGbjrM/images/api-secret-vault.png?fit=max&auto=format&n=E09Qw1MOZESGbjrM&q=85&s=fb7cc70e91408b10f1331e8dd0cbe516" alt="API Secret Vault tab showing connected API cards and the preset catalog" width="885" height="1284" data-path="images/api-secret-vault.png" />
</Frame>

### How it works

When an agent makes an HTTP request to a connected API's origin, Corvic's proxy automatically attaches the stored credential to the correct header (or query parameter). Your agent's code references the connection by name and never handles the raw secret.

## Connector catalog

The catalog includes one-click presets for 35+ common services, grouped by category. Each preset prefills the API origin and the correct authentication header so connecting is just "pick a service and paste your token." The categories below are listed in the page navigation for quick reference.

<Note>
  Presets never carry a real secret: only the **shape** of the request (origin, header name, and an example value). Nothing sensitive ships in the product bundle; your credential is only stored when you enter it.
</Note>

### Sales & CRM

<ul className="connector-list">
  <li><img src="https://www.google.com/s2/favicons?domain=salesforce.com&sz=64" alt="" />Salesforce</li>
  <li><img src="https://www.google.com/s2/favicons?domain=hubspot.com&sz=64" alt="" />HubSpot</li>
  <li><img src="https://www.google.com/s2/favicons?domain=pipedrive.com&sz=64" alt="" />Pipedrive</li>
  <li><img src="https://www.google.com/s2/favicons?domain=zoho.com&sz=64" alt="" />Zoho CRM</li>
  <li><img src="https://www.google.com/s2/favicons?domain=crunchbase.com&sz=64" alt="" />Crunchbase</li>
  <li><img src="https://www.google.com/s2/favicons?domain=apollo.io&sz=64" alt="" />Apollo.io</li>
</ul>

### Finance

<ul className="connector-list">
  <li><img src="https://www.google.com/s2/favicons?domain=stripe.com&sz=64" alt="" />Stripe</li>
  <li><img src="https://www.google.com/s2/favicons?domain=quickbooks.intuit.com&sz=64" alt="" />QuickBooks</li>
  <li><img src="https://www.google.com/s2/favicons?domain=polygon.io&sz=64" alt="" />Polygon.io</li>
  <li><img src="https://www.google.com/s2/favicons?domain=finnhub.io&sz=64" alt="" />Finnhub</li>
  <li><img src="https://www.google.com/s2/favicons?domain=serpapi.com&sz=64" alt="" />SerpApi</li>
</ul>

<p>SerpApi covers Google Finance, Patents, Search, and more.</p>

### Healthcare

<ul className="connector-list">
  <li><img src="https://www.google.com/s2/favicons?domain=ncbi.nlm.nih.gov&sz=64" alt="" />PubMed (NCBI E-utilities)</li>
  <li><img src="https://www.google.com/s2/favicons?domain=epic.com&sz=64" alt="" />Epic on FHIR</li>
  <li><img src="https://www.google.com/s2/favicons?domain=oracle.com&sz=64" alt="" />Oracle Health (Cerner)</li>
  <li><img src="https://www.google.com/s2/favicons?domain=healthgorilla.com&sz=64" alt="" />Health Gorilla</li>
  <li><img src="https://www.google.com/s2/favicons?domain=medplum.com&sz=64" alt="" />Medplum</li>
</ul>

### Databases & Data

<ul className="connector-list">
  <li><img src="https://www.google.com/s2/favicons?domain=databricks.com&sz=64" alt="" />Databricks</li>
  <li><img src="https://www.google.com/s2/favicons?domain=supabase.com&sz=64" alt="" />Supabase</li>
  <li><img src="https://www.google.com/s2/favicons?domain=snowflake.com&sz=64" alt="" />Snowflake SQL API</li>
  <li><img src="https://www.google.com/s2/favicons?domain=huggingface.co&sz=64" alt="" />HuggingFace</li>
  <li><img src="https://www.google.com/s2/favicons?domain=kaggle.com&sz=64" alt="" />Kaggle</li>
</ul>

### Communication

<ul className="connector-list">
  <li><img src="https://www.google.com/s2/favicons?domain=slack.com&sz=64" alt="" />Slack</li>
  <li><img src="https://www.google.com/s2/favicons?domain=twilio.com&sz=64" alt="" />Twilio</li>
  <li><img src="https://www.google.com/s2/favicons?domain=sendgrid.com&sz=64" alt="" />SendGrid</li>
</ul>

### Productivity

<ul className="connector-list">
  <li><img src="https://www.google.com/s2/favicons?domain=notion.so&sz=64" alt="" />Notion</li>
  <li><img src="https://www.google.com/s2/favicons?domain=airtable.com&sz=64" alt="" />Airtable</li>
  <li><img src="https://www.google.com/s2/favicons?domain=linear.app&sz=64" alt="" />Linear</li>
  <li><img src="https://www.google.com/s2/favicons?domain=atlassian.com&sz=64" alt="" />Jira</li>
  <li><img src="https://www.google.com/s2/favicons?domain=google.com&sz=64" alt="" />Google Sheets</li>
  <li><img src="https://www.google.com/s2/favicons?domain=drive.google.com&sz=64" alt="" />Google Drive</li>
  <li><img src="https://www.google.com/s2/favicons?domain=gmail.com&sz=64" alt="" />Gmail</li>
  <li><img src="https://www.google.com/s2/favicons?domain=calendar.google.com&sz=64" alt="" />Google Calendar</li>
  <li><img src="https://www.google.com/s2/favicons?domain=microsoft.com&sz=64" alt="" />Microsoft</li>
  <li><img src="https://www.google.com/s2/favicons?domain=box.com&sz=64" alt="" />Box</li>
  <li><img src="https://www.google.com/s2/favicons?domain=dropbox.com&sz=64" alt="" />Dropbox</li>
</ul>

### Developer

<ul className="connector-list">
  <li><img src="https://www.google.com/s2/favicons?domain=github.com&sz=64" alt="" />GitHub</li>
  <li><img src="https://www.google.com/s2/favicons?domain=gitlab.com&sz=64" alt="" />GitLab</li>
  <li><img src="https://www.google.com/s2/favicons?domain=openai.com&sz=64" alt="" />OpenAI</li>
  <li><img src="https://www.google.com/s2/favicons?domain=anthropic.com&sz=64" alt="" />Anthropic</li>
  <li><img src="https://www.google.com/s2/favicons?domain=scrapfly.io&sz=64" alt="" />Scrapfly</li>
  <li><img src="https://www.google.com/s2/favicons?domain=apify.com&sz=64" alt="" />Apify</li>
  <li><img src="https://www.google.com/s2/favicons?domain=firecrawl.dev&sz=64" alt="" />Firecrawl</li>
</ul>

### Marketing

<ul className="connector-list">
  <li><img src="https://www.google.com/s2/favicons?domain=mailchimp.com&sz=64" alt="" />Mailchimp</li>
  <li><img src="https://www.google.com/s2/favicons?domain=klaviyo.com&sz=64" alt="" />Klaviyo</li>
  <li><img src="https://www.google.com/s2/favicons?domain=google.com&sz=64" alt="" />Google Analytics</li>
  <li><img src="https://www.google.com/s2/favicons?domain=dataforseo.com&sz=64" alt="" />DataForSEO</li>
</ul>

## Custom integration

<Tip>
  Not in the catalog? Add a **custom** connection by entering any API origin, the header your service expects, and your credential. Anything reachable over HTTPS can be connected.
</Tip>

### API Key

Use an API key, personal access token, or other static credential to connect a service. Select a catalog preset or add a custom HTTPS origin, then enter the value in the format the service expects. Corvic stores the value securely and injects it into requests from allowlisted agents.

Supported formats include bearer tokens, service-specific headers, basic authentication, and query parameters.

<Steps>
  <Step title="Add a connection">
    Pick a service from the catalog (one click prefills the host and auth scheme) or add a custom origin manually.
  </Step>

  <Step title="Paste your credential">
    Enter the API key, token, or basic-auth value. Presets show the expected format (for example, `Bearer sk-…` or `Basic <base64>`).
  </Step>

  <Step title="Allowlist it for an agent">
    Grant specific agents access to the connection. From then on, the agent can call that API from `execute_python`.
  </Step>
</Steps>

### OAuth

Connect OAuth 2.0 services by supplying the application details below. After authorization, Corvic securely stores the resulting credentials and refreshes the access token when needed, so agents can continue calling the service without handling tokens directly.

You need:

* **Client ID**: the public identifier for the OAuth application you registered with the provider.
* **Client secret**: the private credential that proves Corvic is acting on behalf of that application. Keep it confidential.
* **Scopes**: the permissions your integration needs, such as read access to contacts or permission to create issues. Request only the minimum required scopes.
* **Token endpoint URL**: the provider URL Corvic calls to exchange an authorization code for access and refresh tokens, and later to refresh the access token.
* **Authorization endpoint URL**: the provider URL where the user signs in and approves the requested scopes.
* **Additional authorization parameters**: provider-specific values added to the authorization request. To receive a refresh token, providers may require `access_type=offline`, `prompt=consent`, an `offline_access` scope, or another documented parameter.

## Dedicated IP

If a connected service only accepts requests from known IP addresses, turn on [Dedicated IP](/features/dedicated-ip) for its connection. Its requests then always come from a fixed pair of Corvic addresses that you can allowlist.

## Related Documentation

<CardGroup cols={2}>
  <Card title="Dedicated IP" icon="network-wired" href="/features/dedicated-ip">
    Reach services behind an IP allowlist.
  </Card>

  <Card title="Room Templates" icon="rocket" href="/features/room-templates">
    Templates that rely on these connectors.
  </Card>

  <Card title="Agents" icon="robot" href="/features/agents">
    Allowlist connections for an agent.
  </Card>

  <Card title="Python & SQL" icon="python" href="/features/python-sql">
    Call connected APIs from agent code.
  </Card>
</CardGroup>


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.