Integrations & Developer Platform
Connected systems and their real status. A provider is never shown as connected unless a request to it succeeded.
Directory
| Provider | Category | Status | Detail |
|---|---|---|---|
| Stripe | Payments | CONNECTED | Test mode. Live charges are disabled in this preview. |
| Momence | Booking system | UNAVAILABLE | Credentials were rejected by the provider (invalid token). Not connected. |
| Mindbody | Booking system | AVAILABLE | Sandbox API authentication is verified; a connector is not yet configured. |
| Transactional email | Messaging | UNAVAILABLE | No email provider is configured. Reminders will not be delivered. |
API keys, OAuth, and webhooks
Not implemented in this preview. The correct design, when it is built:
- API keys are shown once at creation and stored hashed, never retrievable afterwards.
- Keys carry explicit scopes and a revocation and rotation path.
- Webhook endpoints verify the provider's signature over the exact request body before any state change, and are idempotent by event id.
- Secrets live in the approved secret manager, never in the client bundle.
Exposing a key or webhook secret to this static console would put it in a browser bundle, so the feature is absent rather than unsafe.
MCP and AI-agent connections
No MCP connection is available from this console. Any future agentic access must sit above the canonical API and its authorization, not beside it: no direct database access, no unrestricted deletion, and no refund or transfer through an agent without human approval.
Account deletion in particular must not be exposed as an unrestricted agent action.
Import and export jobs
No import or export job has been run. There is no synchronization status to show, because no synchronization exists.