Ownership
Customer and operator credentials stay distinct
A customer-managed credential cannot be used to manage another organization. Broader operator access follows a separate administrative path.
Security
Every credential has an owner, a ceiling, and an audit trail
Customer credentials belong to one organization. Operator credentials are managed separately. Scopes, user context, network rules, expiration, and environment boundaries constrain what each integration can do.
Credential scopes
Expiration and rotation
IP and CIDR restrictions
Request IDs
Audit events
Sandbox isolation
Webhook delivery logs and replay
OAuth
Approved scopes and PKCE
Authorization code installs use PKCE, approved redirect targets, and an app-defined scope ceiling. Service integrations can use client credentials where appropriate.
Network and secrets
IP rules, rotation, and expiry
Credentials can use IP or CIDR restrictions, controlled rotation, expiration, and one-time secret display.
Isolation
Sandbox cannot reach live work
Sandbox credentials are bound to an isolated environment with simulated call and messaging behavior.
Integration review
Review the access model with your team.
Let’s find the right way to connect your business.