mcpProvider-backed

Create integration credential

tools/call

Store a BYOK integration credential for the workspace (bring your own API key/token). Rejects pipedrive, close, and ghl/gohighlevel - those integrations are retired. Auth secrets are masked in the response.

Parameters

workspaceId

string

Optional workspace ID or slug. Required when this credential can access multiple workspaces and no workspace was configured on the client.

service_slugrequired

string

Integration service slug, e.g. ai_ark, crustdata, fullenrich, bettercontact, wiza, signalbase, adyntel, prospeo, instantly, or hubspot.

name

string

Optional display name. Defaults to "<Service> API key".

auth_type

string

Optional. Defaults to the service preset's auth type.

api_key | bearer | basic | oauth2 | custom_header

auth_config

object

Explicit auth config map (e.g. { api_key: "..." }). For Adyntel use { username: "account@email.com", password: "api-key" }. Takes precedence over api_key/bearer_token shorthand.

api_key

string

Shorthand for auth_config when auth_type is api_key.

bearer_token

string

Shorthand for auth_config when auth_type is bearer.

scope

string

Optional. Defaults to the service preset's scope, usually workspace.

personal | workspace

external_id

string

Optional external identifier for the credential (e.g. account id at the provider).

Example

MCP tools/calljson

{
  "jsonrpc": "2.0",
  "id": 1,
  "method": "tools/call",
  "params": {
    "name": "create-integration-credential",
    "arguments": {
      "service_slug": "example"
    }
  }
}

Response

The operation is available, but its typed response schema has not been published yet.

JSON-RPC errors

-32602: Invalid parameters. Field-level details are returned in the JSON-RPC error data.
-32001: Authentication or hosted AI consent is required.
-32003: Workspace access is denied.
-32029: The request was rate limited.