Secrets and integrations for connecting external services.

Overview

inference.sh provides two ways to give your agents access to external services:

Security

Both secrets and integrations are:

• Encrypted at rest using AES-256-GCM
• Never logged or exposed in task outputs
• Scoped to your team — other teams cannot access them
• Injected only at runtime — only to apps that require them and only to apps that are verified or user-owned

How they work with apps

Apps can declare what they need:

1requirements:2  # Environment secrets3  secrets:4    - key: OPENAI_API_KEY5      description: For GPT-4 calls6    7    - key: STRIPE_SECRET_KEY8      description: For payments9      optional: true10 11  # Integrations12  integrations:13    - key: google.sheets14      description: Read sales data15    16    - key: x.tweet.write17      description: Post updates18      optional: true

When you run the app:

1. We check if you have the required secrets and integrations
2. If something's missing, you'll be prompted to add it
3. Once satisfied, credentials are injected automatically

Quick Links

Secrets

Store your own API keys and credentials:

→ Environment Secrets

Integrations

Connect to external services with managed OAuth:

→ Integrations Overview

Available integrations:

• Google Service Account — Sheets, Docs, Drive
• Google OAuth — Gmail, Calendar, personal Drive
• X.com — Twitter API

Next

→ Environment Secrets