Integrations
Console pages for connecting an external store, managing a connection, and mapping an environment to it for import or export.
Path: Integrations, with three rows: Connections, Dynamic Engines, Providers. An integration is an outside store we hold a credential for. The opposite direction, your workload proving itself to us, is Connect a Platform; nothing appears under both.
Pages
| Page | Path | Content |
|---|---|---|
| Connections | /integrations | Your connections, their sync counts, how many need reconnecting, and your plan's connection quota. Filter by name, provider and status |
| Providers | /integrations/providers | 104 entries across 61 vendors: cloud secret stores, hosting platforms, CI variable stores. Each card names what the connection reads or writes and its activation mode |
| Connect wizard | /integrations/authorize/[provider] | Pick a connect method, complete it, test, finish the grant, then optionally create the first mapping |
| Connection | /integrations/[connectionId] | Provider, credential fingerprint, last check and sync count. Tabs: Syncs (imports and exports, add one), Credential (verify, settings fixed at connect time), Danger Zone (stop or remove). Rotate Credential replaces the stored credential |
| Mapping | /integrations/[connectionId]/syncs/[syncId] | One direction for one environment, with its path prefix, location at the provider and conflict policy. Tabs: Preview (preview and apply), Runs (counts per run, never a value), Danger Zone (remove) |
| Dynamic Engines | /integrations/dynamic | Dynamic engines |
We disable connecting once you use your plan's connection quota: plan limits. The provider catalog: integrations.
Directions, conflict policies, activation modes, preview and apply, and the export acknowledgement: how syncs work. A test inside the wizard stores and records nothing; we audit every verify of a stored connection: connect methods.
Required permissions
Permission slugs: roles and permissions. Step-up rules: Security and two-factor.
| Action | Needs | Step-up | Recorded as |
|---|---|---|---|
| Open Connections or Providers | integration:read | No | not recorded |
| Render a policy for a method | integration:read | No | not recorded |
| Connect a store | integration:connect | Yes | integration.connected |
| Test a credential before we store it | integration:connect | No | not recorded |
| Verify a stored connection | integration:connect | No | integration.verified |
| Rotate the stored credential | integration:connect | Yes | integration.credential_rotated |
| Add an export mapping | integration:configure and secret:reveal there | Two-factor and fresh | integration.sync_created |
| Add an import mapping | integration:configure and secret:write there | Yes | integration.sync_created |
| Apply a preview | integration:run | Yes | the run's entries |
| Remove a mapping | integration:configure | Yes | integration.sync_removed |
| Preview a run | integration:run | integration.run_enqueued | |
| Apply a run | integration:run | integration.run_applied | |
| Stop a connection | integration:delete | integration.revoked | |
| Remove a connection | integration:delete | integration.connection_removed |
Next: dynamic engines.