Using the credentials app feature, you can effortlessly connect to third-party services—minimal coding required!

Whether you're building blocks for monday workflows or integrating external APIs, this feature makes secure, scalable integrations easier than ever. The framework handles authentication flows and credential storage, so you can focus on building flexible, user‑friendly solutions.

Concepts

The credentials app feature enables secure authentication between monday apps and third-party services—such as Google, Dropbox, or Slack— within monday workflows.

It manages both OAuth 2.0 and API Token authentication flows, making it easy to integrate services regardless of the authentication method they support.

Once authenticated, user-specific credentials are securely stored and scoped to the app. These credentials can then be reused across multiple workflow app features, including blocks and custom fields.

👍

Authentication types supported

• OAuth 2.0: Handles redirect flows, token exchange, refresh tokens, and user consent.
• API Token: Uses a static token for direct API access. Simple and fast to set up, but less secure.

✅ Best practice: Prefer OAuth whenever possible for stronger security and better token management.

Implementation

Building a credentials app feature requires setting up both your monday app and the third‑party service you are integrating with. Since these two systems rely on coordination between your apps, some configurations will need to happen in parallel.

The steps below provide a high‑level overview of the process, with additional details available in the Reference section:

1. Start by creating an app for the third‑party service you want to integrate with. Follow the provided instructions to set up the required settings accurately.
2. Create an app or open an existing one in the monday.com Developer Center.
3. Add a Credentials app feature. Learn how to create a new app feature here.

4. After creating your monday app feature, configure your monday app's settings for each of the sections below:

If you selected OAuth

Continue configuring the following sections in your monday app:

If you selected API Token

The following fields will appear in the configuration panel:

5. Connect the credentials app feature to your block and custom field app features to use in the workflow builder.
6. Test your workflow blocks using these steps (optional, but recommended).
7. Promote the draft version to live to make the feature accessible in the platform.
8. After successful authentication, the credentials will be stored in monday.

Reference

Redirect URL

When configuring your external app, all third‑party services that support OAuth 2.0 will ask for a redirect URL where they will send users after they login.

You can access this in the Developer Center after creating your monday.com credentials app feature. Alternatively, you can use the following OAuth Redirect URL: https://apps-credentials.monday.com/authorize/oauth2/redirect-uri

Provider unique identifier

Some third‑party services use unique identifiers to recognize individual user connections.

👉 For example: In Gmail, the unique identifier is the user's email address.

Since there's no standard for exposing or retrieving the identifier across different services, you must provide a publicly accessible backend endpoint that we can call to retrieve it. This endpoint should verify the incoming request by checking the Authorization header against the application signing secret.

// Example: Verify Authorization header using the jsonwebtoken package

const { authorization } = req.headers;

const signingSecret = process.env.MONDAY_SIGNING_SECRET;

await new Promise((resolve, reject) => {
   jwt.verify(authorization, signingSecret, (err, decoded) => {
      if (err) {
        reject(err);
      } else {
        resolve(decoded);
      }
   });
});

After implementing your endpoint:

1. Navigate to the Extra details section of your credentials app feature.
2. Enter the URL of the endpoint used to retrieve the provider’s unique identifier — e.g., https://your-server

This refers to the request monday.com sends to your backend during the OAuth callback phase. After the OAuth flow is complete, we’ll call your provided endpoint to retrieve the provider’s unique identifier for the user's credentials.

We include the user's access token in this request, along with the following payload:

{
  "token": "abcs1234"
}

{  
  "userId": 123, // The ID of the user initiating the request  
  "accountId": 456, // The ID of the account associated with the request  
  "appFeatureReferenceId": 789, // The reference ID of your app feature  
  "callbackRequestedParams": {...}, // Parameters extracted from the OAuth callback  
  "tokenRequestedParams": {...}, // Parameters extracted from the token response  
  "userCredentialsParams": {...} // Optional parameters provided by the user  
}

We automatically enrich the request with the user’s access token, using the key you provided under the token key.

Expected response

Your server should return the following format:

{  
  "providerUniqueIdentifier": "[email protected]", // a unique token-specific ID  
  "displayName": "Test Gmail" // the name displayed to the user in the UI  
}

Configure credential parameters

Some third‑party services require user‑specific information (e.g., subdomain, region, organization ID) before initiating the authentication flow. Using credential parameters, you can collect this information and define extra input fields that appear when a user sets up the integration.

👉 For example: In Salesforce, we need to know the user's subdomain to be able to interact with the correct API.

Supported types

Credential parameters support primitive data types: string, boolean, and number.

You can link a parameter to a field type that uses one of these primitive types. Parameters can also reference a primitive field type that includes static options.

How to configure

1. You can configure credential parameters directly in the Developer Center under your Credentials app feature. When adding a parameter, be sure to include:

• Name: A short key used to reference the value in API calls
• Title: A user‑facing name that explains what the field is
• Type: Choose from string, number, or boolean
• Required: Mark whether the field is required

2. Once configured, these parameters can be referenced inside the other credential fields through a {{parameterName}} syntax.

"authorizationUrl": {
  "type": "url",
  "value": "https://{{subdomain}}.salesforce.com/oauth2/authorize"
}

3. When the authorization flow is initiated, we replace the parameters with user‑provided input. That value is also available in the payload of your provider's unique identifier endpoint and other credential‑based requests (e.g., block execution URL, and remote options).

Configure API token parameters

Some third-party services don’t support OAuth and instead require authentication using API tokens. Through API token parameters, you can define the input fields that appear when a user sets up the integration.

How to configure

You can configure API token parameters directly in the Developer Center under your Credentials app feature.

These parameters appear automatically when you select API Token as the credentials type. Some fields are pre-defined and can't be modified, but you can configure the following settings to customize how the token behaves in your app:

• Parameter Title: The field title shown to users
• Placeholder: The text displayed inside the input field before the user enters a value
• Static Suffix: The optional text displayed after the input field
• Description Text: Brief additional context or guidance to help users understand what to enter
• Link Text: The label for an optional link (e.g., “Learn more”)
• Link URL: The destination URL opened when a user clicks the link text

These settings control how the API Token field appears in the monday.com UI when users connect your app.

Connect credentials app feature to other app features

You have to connect the credentials app feature to use it in the workflow builder:

Custom field for monday workflows

1. Open your custom field app feature and navigate to the Credentials section.
2. Click Add credentials.
3. Select the credential from the dropdown and assign a key*.
4. Click Add.

• 📝 Note: The key will be used in the payloads of requests made to your service (e.g., for remote options or sub‑fields). It will be accessible under the credentialsValues attribute.

Integration for monday workflows

1. Open your block app feature and navigate to the Credentials section.
2. Click Add credentials.
3. Select the credential from the dropdown and add a title, header (optional), subheader, and key*.
4. Click Add.

• 📝 Note: The key will be used in the payloads of requests made to your service (e.g., for subscribe and unsubscribe or run execution). It will be accessible under the credentialsValues attribute.