What are Workspace Credentials?
Workspace credentials are secure authentication keys and tokens that enable your bots to integrate with external services. Unlike API tokens which authenticate API requests, credentials store third-party service authentication data.Supported Integration Types
QuickBot supports credentials for various integration types:- Google Sheets: OAuth tokens for accessing Google Sheets
- SMTP: Email server credentials for sending emails
- Stripe: Payment processing credentials
- WhatsApp: Meta Business API credentials
- OpenAI: API keys for AI integrations
- Other integrations: Various service-specific credentials
Creating Credentials
Add New Credentials
To create new integration credentials:- Navigate to Workspace Settings > Credentials
- Click the Create new dropdown button
- Select the integration type you want to configure
- Fill in the required authentication information
- Assign a descriptive name to identify the credentials
- Save the credentials
Each integration type has different required fields. For example, SMTP requires server host, port, username, and password, while OAuth services like Google Sheets require authorization through their respective platforms.
Credential Naming Best Practices
Use clear, descriptive names that help you identify the purpose:- ✅
Production Gmail SMTP - ✅
Development Stripe Account - ✅
Marketing WhatsApp Business - ❌
Credentials 1 - ❌
My API Key
Managing Existing Credentials
View All Credentials
The credentials page displays all configured credentials with:- Type: The integration service (shown with service icon)
- Name: Your custom name for the credentials
- Actions: Edit and delete options
Edit Credentials
To modify existing credentials:- Find the credentials in your list
- Click the Edit button (pencil icon)
- Update the necessary fields
- Save your changes
Some credential types like WhatsApp and Google Sheets cannot be edited after creation due to OAuth token restrictions. You’ll need to delete and recreate these credentials if changes are needed.
Delete Credentials
To remove credentials:- Click the Delete button (trash icon) next to the credentials
- Confirm the deletion in the popup dialog
Important: Before deleting credentials, ensure they are not being used by any published bots. Deleting credentials will break integrations in live bots that depend on them.
Using Credentials in Bots
Integration Blocks
Once credentials are created, they become available for use in integration blocks:- Add an integration block to your bot flow
- In the block settings, select the appropriate credentials from the dropdown
- The block will use those credentials to authenticate with the service
Credential Scope
- Workspace Level: All credentials belong to a specific workspace
- Bot Access: Any bot within the workspace can use the credentials
- Member Access: Workspace members with appropriate permissions can manage credentials
Security Best Practices
Protecting Your Credentials
- Unique Names: Use descriptive names to avoid confusion
- Regular Audits: Periodically review which credentials are still needed
- Access Control: Only workspace administrators can manage credentials
- Secure Storage: All credentials are encrypted and stored securely
Service-Specific Security
API Keys
- Rotate API keys regularly according to service recommendations
- Use service-specific permissions to limit access scope
- Monitor usage through service dashboards
OAuth Tokens
- Re-authorize OAuth connections if permissions change
- Revoke access from service admin panels when no longer needed
- Monitor connected applications in your service accounts
Troubleshooting
Credentials Not Working
If your integration isn’t working with stored credentials:- Verify credentials: Check that all required fields are correctly filled
- Test permissions: Ensure the credentials have appropriate access rights
- Check service status: Verify the external service is operational
- Review bot configuration: Confirm the correct credentials are selected in your bot blocks
Authentication Errors
Common authentication issues and solutions:- Expired tokens: Re-create OAuth-based credentials (Google Sheets, WhatsApp)
- Invalid API keys: Generate new API keys from the service provider
- Permission denied: Check that credentials have required permissions for the integration
- Rate limits: Verify you haven’t exceeded service usage limits
Service Connection Issues
- Network connectivity: Ensure your bots can reach external services
- Service changes: Check if the external service has updated their API requirements
- Credential format: Verify that credential format matches service expectations
Test your credentials immediately after creation by using them in a simple bot integration to ensure they work correctly before implementing complex workflows.