Folder

Integrations

Integrations are reusable connection configurations for external services. Builders stores their credentials in Vault and lets compatible triggers, blocks, file operations, and approved AI tools reference the connection without embedding secrets in every pipeline.

The Integrations list showing connection type, ownership, MCP status, and management actionsThe Integrations list showing connection type, ownership, MCP status, and management actions

Understand the integration boundary

An integration connects four concerns that should remain separate:

provider account or server
  -> credential and permission set
  -> Builders integration stored in Vault
  -> compatible workflow block or AI tool

Creating an integration does not run a workflow and does not grant every project access to the provider. A block must support that integration type, the integration must be available in the project's ownership scope, and the selected credential must have the provider permissions required by the operation.

For AI Agent tools, the relationship has one additional gate:

AI Agent
  -> enabled tool
  -> compatible integration
  -> MCP enabled for that integration
  -> external operation

See Configure Tools and Integrations for the AI-specific authorization boundary.

Create an integration

Open Integrations and select Create. The wizard uses these steps:

StepPurpose
ChooseSelect one of the integration types available in the catalog
ConfigEnter the provider connection, identifiers, credentials, and optional defaults
AssignSelect personal or team ownership for the stored configuration
MCPDecide whether supported AI Agent tools may use the integration
SummaryReview the selected type, scope, and configuration before saving

Some types do not expose MCP and therefore use a four-step wizard without the MCP step. The current Email SMTP/IMAP and SSH forms follow that shorter flow.

Provider callback URLs are generated by Builders. Integrations that receive webhooks commonly require this order:

  1. Complete the configuration and assignment.
  2. Save the integration.
  3. Reopen it and copy its callback URL.
  4. Register that URL in the provider's webhook, Events API, number, topic, or subscription settings.
  5. Send a real provider event and inspect the resulting workflow run.

Read the integrations list

ColumnMeaning
Vault nameThe reusable name selected for this stored configuration
IntegrationThe provider adapter and integration type
CategoryMailing, Storage, Messaging, Project Management, Queue, or Remote Access
Owner type / OwnerWhether the integration belongs to a user or a team, and which owner controls it
MCPWhether the stored integration is enabled for supported AI tool access
CreatedWhen the integration configuration was created
ActionsEdit or delete the stored integration

The MCP value is not a connection-health indicator. Use Test connection in the configuration form and then execute a representative block. Webhook integrations also require an inbound event test because an outbound API check cannot prove that the provider callback is configured correctly.

Keep credentials out of workflows

  • Store tokens, passwords, private keys, and application secrets only in supported integration fields.
  • Do not paste credentials into block templates, Code blocks, schemas, exported workflow files, labels, logs, or screenshots.
  • Use a service account or application identity where the provider supports one.
  • Grant the smallest provider scope required by the blocks that will use the integration.
  • Give production and test environments separate credentials and callback registrations.
  • Rotate credentials deliberately and retest every dependent workflow after replacement.

Deleting or rotating a provider credential can break every workflow that references the integration. Inventory dependent pipelines before changing a shared connection.

Documentation map

Next steps

Explore this folder

Boilerplate Wiki - Integrations