Step 10 of 15 · Integrations · topic 3 of 4
In detail
What can you configure in Integrations?
From the provider's document
Reads the documentThe platform interprets a third-party API document and extracts endpoints, methods, fields and security.
Proposes the registrationA complete service entry arrives for review, not a blank form.
Maps the fieldsSuggests which form fields go out and which returned values fill which fields.
Configuration, not codeThe integration is saved as configuration, changed like any screen or rule.
Security mechanisms
API keySent in a header or in the query string.
Basic authenticationUser name and password, stored encrypted.
Bearer tokenA fixed or issued token on every call.
OAuth 2.0Client-credentials flow; the token is fetched, cached and refreshed automatically.
Signed JWTRequests carry a token signed with your key.
HMAC signingEach request is signed so the provider can verify it.
Mutual TLSClient certificates for providers that require them.
Safe by design
Secrets on the serverKeys, passwords and certificates are encrypted and never reach phones or browsers.
Server-side callsEvery call is made by the server, never by the device.
TimeoutsEach service has its own time limit, so a slow provider cannot hold up a user.
Where a service is used
DropdownsOptions filled live from the service.
LookupsA field fetches and fills other fields.
Buttons and uploadsA button beside a field, or a document upload that fills the form.
Workflow stepsAn automatic step calls the service and routes the case by the result.
CallbacksAn incoming call from the provider moves a waiting case on.
Test and watch
Sample testerTry the mapping with a sample response before going live.
ChecksUnknown fields and bad response paths are flagged.
Call logEvery call is logged with time, status and result; slow calls are highlighted.
Example · Customer Loan Origination
The loan example connects ten services — OTP, identity reading, pincode lookup, dedupe, credit bureau, statement analysis, scoring, bank-account check, payment and loan-system hand-off. Outside services run against sandbox or mock endpoints with invented data.
Build your first app free
Up to 10 users. 30 days to build, then 30 days live after go-live.
Updated 30 September 2026