Integrations Documentation

Connect third-party services to your website. Store credentials securely in the Vault and execute API calls through the integration proxy — your API keys never leave the server.

Overview

The integrations system consists of two APIs working together:

The typical flow is: store a secret in the Vault, setup the integration, then execute proxy calls. The proxy resolves {{vault:key_name}} references server-side and forwards requests to the third-party API with real credentials.

Authentication

All Vault and Integration endpoints (except the public catalog) require authentication via Bearer token:

Authorization: Bearer {your_api_token}

Both wps_ session tokens and wpa_ access keys are accepted.

Vault — Secure Credential Storage

The Vault is a write-only credential store. After storing a secret, the actual value is never returned by any API endpoint. You only get metadata (name, prefix, creation date). The system decrypts values internally when executing integration proxy calls.

Store a Secret

curl -X POST "https://api.websitepublisher.ai/vapi/project/22291/secrets" \
  -H "Authorization: Bearer YOUR_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{
    "key_name": "resend_api_key",
    "value": "re_abc123...",
    "service_type": "resend"
  }'

{
    "success": true,
    "data": {
        "key_name": "resend_api_key",
        "key_prefix": "re_abc...",
        "service_type": "resend",
        "status": "active",
        "message": "Secret stored securely. The value will never be shown again."
    }
}

List Secrets

{
    "success": true,
    "data": [
        {
            "key_name": "resend_api_key",
            "key_prefix": "re_abc...",
            "service_type": "resend",
            "status": "active",
            "created_at": "2026-02-10T14:30:00Z"
        }
    ]
}

Delete a Secret

Integration Catalog

The catalog lists all available integrations. These endpoints are public — no authentication required.

Integration Management

Manage integrations for your project. View configured status, setup new integrations, and remove existing ones.

{
    "success": true,
    "data": {
        "configured_count": 1,
        "integrations": [
            {
                "service": "resend",
                "status": "configured",
                "endpoints": ["send-email"]
            },
            {
                "service": "mollie",
                "status": "available",
                "missing_secrets": ["mollie_api_key"]
            }
        ]
    }
}

Setup Integration

curl -X POST "https://api.websitepublisher.ai/iapi/project/22291/integrations/resend/setup" \
  -H "Authorization: Bearer YOUR_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{
    "secrets": {
      "resend_api_key": "re_abc123..."
    }
  }'

{
    "success": true,
    "data": {
        "integration": "resend",
        "status": "configured",
        "secrets_stored": ["resend_api_key"],
        "available_endpoints": [
            {
                "endpoint": "send-email",
                "method": "POST"
            }
        ]
    }
}

Execute Proxy Call

curl -X POST "https://api.websitepublisher.ai/iapi/project/22291/resend/send-email" \
  -H "Authorization: Bearer YOUR_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{
    "from": "hello@yourdomain.com",
    "to": "user@example.com",
    "subject": "Welcome!",
    "html": "<h1>Hello!</h1><p>Welcome to our site.</p>"
  }'

{
    "success": true,
    "data": {
        "integration": "resend",
        "endpoint": "send-email",
        "result": {
            "id": "d5b79f7a-f3ee-4f17-8b21-0969f800e226"
        }
    }
}

Remove Integration

Available Services

Resend — Transactional Email

Send transactional emails through the Resend API. Get your API key at resend.com.

Input Fields — send-email

Mollie — Payments

Process payments through the Mollie API. Get your API key at mollie.com.

Input Fields — create-payment

Input Fields — get-payment

Freemium Limits

Usage limits are enforced per project based on tier:

When a limit is reached, the API returns 429 Too Many Requests with a descriptive error message. Re-configuring an existing integration does not count toward the integration limit.

Security Model

The integrations system implements several security measures:

AES-256-GCM Encryption — All vault secrets are encrypted at rest. Each entry uses a unique IV for authenticated encryption.

Write-Only Vault — After storage, secret values cannot be retrieved via any API endpoint, MCP tool, or dashboard interface. The system can only decrypt them internally during proxy execution.

Output Sanitization — A global middleware scans all API responses for vault references ({{vault:...}}) and known API key patterns, replacing them with [REDACTED]. This is a safety net in case a credential accidentally appears in response data.

Project Isolation — Each project has its own vault namespace. Cross-project access is prevented by ownership validation on every request.

Server-Side Resolution — Vault credentials are resolved server-side inside the proxy engine. The AI assistant, browser, or API client never sees the actual key value.

Error Handling

All errors return a consistent format:

{
    "success": false,
    "error": {
        "message": "Description of the error",
        "code": 400
    }
}

HTTP Status Codes

Complete Example

Here's the full flow to send an email via Resend — from setup to delivery:

# 1. Setup Resend integration (stores key in vault)
curl -X POST "https://api.websitepublisher.ai/iapi/project/22291/integrations/resend/setup" \
  -H "Authorization: Bearer YOUR_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"secrets": {"resend_api_key": "re_your_key_here"}}'

# 2. Send an email (proxy resolves vault key server-side)
curl -X POST "https://api.websitepublisher.ai/iapi/project/22291/resend/send-email" \
  -H "Authorization: Bearer YOUR_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{
    "from": "hello@yourdomain.com",
    "to": "user@example.com",
    "subject": "Welcome!",
    "html": "<h1>Welcome</h1><p>Thanks for signing up.</p>"
  }'

# 3. Check configured integrations
curl "https://api.websitepublisher.ai/iapi/project/22291/integrations" \
  -H "Authorization: Bearer YOUR_TOKEN"

# 4. Remove integration when done (deletes vault keys)
curl -X DELETE "https://api.websitepublisher.ai/iapi/project/22291/integrations/resend" \
  -H "Authorization: Bearer YOUR_TOKEN"