Supported Credentials

Supported Credentials

indie.money supports 300+ credential types across three authentication methods. The most commonly used services are listed below by auth method.

OAuth 2.0 (one-click connect)

Click "Connect" and authorize through the service's login page. Tokens are refreshed automatically.

Acuity Scheduling, Asana, Box, Calendly, Cisco Webex, ClickUp, Drift, Facebook Lead Ads, Formstack, GetResponse, Gmail, GoTo Webinar, Google Ads, Google Analytics, Google Docs, Google Sheets, Google Slides, Keap (Infusionsoft), LINE Notify, LinkedIn, Medium, Microsoft Excel, Microsoft OneDrive, Microsoft Outlook, Microsoft Teams, Microsoft To Do, Nextcloud, Philips Hue, Pushbullet, Raindrop.io, Reddit, Salesforce, Spotify, Strava, Twitter/X, Xero, Zoho, Zoom

Generic Auth (any API — Bearer or Basic)

Use these when your API is not in the list below and you need to authenticate HTTP Request nodes. You supply the secret and the Allowed Domains — the hosts the secret may be sent to — during setup.

HTTP Bearer Auth — for any API that accepts Authorization: Bearer <token>. Enter your token and the allowed hosts (e.g. api.myservice.com, *.myservice.com). The platform injects the token as a Bearer header on every request to an allowed host; a request to any other host fails with Domain not allowed.

HTTP Basic Auth — for any API that accepts Authorization: Basic <base64>. Enter your username, password, and the allowed hosts. The platform encodes and injects the credentials on every request to an allowed host.

Header Auth and Query Auth under Generic Credential Type are not supported and blocked at deploy — add custom headers or query parameters directly in the HTTP Request node parameters instead.

API Key

Enter your API key or access token in the Secure Vault.

Action Network, ActiveCampaign, Adalo, Airtable, Airtop, APITemplate.io, Asana, Bitbucket, Bitly, Brandfetch, Bubble, Cal.com, Calendly, CircleCI, Clearbit, Clockify, Cloudflare, Coda, Contentful, ConvertKit, Copper, Cortex, Currents API, Customer.io, DeepL, Demio, Discord (Bot), Discourse, Disqus, Drift, Dropbox, Dropcontact, Eventbrite, Facebook Graph, Figma, Flow, Formstack, Freshworks CRM, GetResponse, Ghost (Content), GitHub, GitLab, Gotify, Gumroad, HaloPSA, Harvest, HighLevel, HubSpot, HubSpot Developer, Intercom, Invoice Ninja, Iterable, Jina AI, Jira (PAT), JotForm, Lemlist, Linear, LingvaNex, LoneScale, Magento 2, Mailchimp, MailerLite, Mailjet (SMS), Mattermost, Medium, MessageBird, Metabase, Mindee (Invoice), Mindee (Receipt), monday.com, Monica CRM, MSG91, Netlify, NocoDB, NocoDB (Token), Notion, npm, Okta, OneSimpleAPI, OpenAI, OpenRouter, Oura, PagerDuty, PayPal, Perplexity, PhantomBuster, Pinecone, Pipedrive, Postmark, Pushover, Quick Base, Rocket.Chat, Rundeck, SearXNG, SendGrid, Brevo (Sendinblue), Sentry, Sentry (Server), SerpAPI, Shopify (Token), Slack, Stackby, Storyblok (Content), Storyblok (Management), Strapi, Strapi (Token), Stripe, Supabase, SurveyMonkey, Taiga, Telegram, Todoist, Trello, Twake Cloud, Typeform, Uplead, UProc, urlscan.io, Webflow, Wekan, WhatsApp, Wise, Wolfram Alpha, Workable, Zammad (Token)

Basic Auth (username + password)

Chargebee, Freshdesk, Freshservice, Gong, Jenkins, Jira Cloud, Jira Server, Mailgun, Mailjet (Email), Mautic, Nextcloud, Plivo, Segment, ServiceNow, Shopify, Toggl, Twilio, WooCommerce, WordPress, Wufoo, Zammad, Zendesk

Not Yet Supported

• Database connections (PostgreSQL, MySQL, Redis, MongoDB)
• Email sending (SMTP, IMAP)
• Webhook-URL credentials (Discord webhooks, Google Chat incoming webhooks) — the URL is itself the secret, so Secure Vault cannot protect it. Use Discord (Bot) or Google Chat with OAuth2 instead
• Services requiring custom authentication flows not listed above

Need a Service?

Use the feedback widget to request a new integration. High-demand services are prioritized.