Credential

The Credential block hands a downstream block an OAuth credential to use, without exposing the secret. It has two operations: Select Credential outputs one credential's ID reference for other blocks to use; List Credentials returns all the workspace's OAuth credentials (optionally filtered by provider) as an array to iterate over.

Credential

OperationSelect Credential

Credential-

error

The Credential block outputs credential ID references, not secrets. Downstream blocks receive the ID and resolve the actual OAuth token securely during their own execution.

Configuration

Operation

Value	Description
Select Credential	Pick one OAuth credential and output its reference — use this to wire a single credential into downstream blocks
List Credentials	Return all OAuth credentials in the workspace as an array — use this with a ForEach loop

Credential (Select operation)

Select an OAuth credential from your workspace. The dropdown shows all connected OAuth accounts (Google, GitHub, Slack, etc.).

In advanced mode, paste a credential ID directly. You can copy a credential ID from your workspace's Credentials settings page.

Provider (List operation)

Filter the returned OAuth credentials by provider. Select one or more providers from the dropdown — only providers you have credentials for will appear. Leave empty to return all OAuth credentials.

Example	Returns
Gmail	Gmail credentials only
Slack	Slack credentials only
Gmail + Slack	Gmail and Slack credentials

Outputs

Output	Type	Description
`credentialId`	`string`	The credential ID — pipe this into other blocks' credential fields
`displayName`	`string`	Human-readable name (e.g. "waleed@company.com")
`providerId`	`string`	OAuth provider ID (e.g. `google-email`, `slack`)

Output	Type	Description
`credentials`	`json`	Array of OAuth credential objects (see shape below)
`count`	`number`	Number of credentials returned

Each object in the credentials array:

Field	Type	Description
`credentialId`	`string`	The credential ID
`displayName`	`string`	Human-readable name
`providerId`	`string`	OAuth provider ID

Examples

Select a Google account once, then reference <credential.credentialId> in the Gmail, Drive, and Calendar blocks. Change the account in one place and every block follows.

Route to a different account by logic

A Condition picks the production or staging credential from a workflow variable, and the downstream Slack block posts with whichever one ran.

List all accounts and fan out

Credential (List, Provider: Gmail) → ForEach Loop → Gmail (Send) using <loop.currentItem.credentialId>

How to wire a Credential block

Select Credential

Drop a Credential block and select your OAuth credential from the picker
In the downstream block, switch to advanced mode on its credential field
Enter <credentialBlockName.credentialId> as the value

The same reference works for any OAuth block. In a Gmail or Slack block's credential field (advanced mode), enter <myCredential.credentialId>.

List Credentials

Drop a Credential block, set Operation to List Credentials
Optionally select one or more Providers to narrow results (only your connected providers appear)
Wire <credentialBlockName.credentials> into a ForEach Loop as the items source
Inside the loop, reference <loop.currentItem.credentialId> in downstream blocks' credential fields

Best Practices

Define once, reference many times: When five blocks use the same Google account, use one Credential block and wire all five to <credential.credentialId> instead of selecting the account five times
Outputs are safe to log: The credentialId output is a UUID reference, not a secret. It is safe to inspect in execution logs
Use for environment switching: Pair with a Condition block to route to a production or staging OAuth credential based on a workflow variable
Advanced mode is required: Downstream blocks must be in advanced mode on their credential field to accept a dynamic reference
Use List + ForEach for fan-out: When you need to run the same action across all accounts of a provider, List Credentials feeds naturally into a ForEach loop
Narrow by provider: Use the Provider multiselect to filter to specific services — only providers you have credentials for are shown

Common Questions

No. The block outputs a credential ID (a UUID), not the actual OAuth token. Downstream blocks receive the ID and resolve the token securely in their own execution context. Secrets never appear in workflow state, logs, or the canvas.

OAuth connected accounts only (Google, GitHub, Slack, etc.). Environment variables and service accounts cannot be resolved by ID in downstream blocks, so they are not supported.

Functionally identical — both pass the same credential ID to the downstream block. The Credential block adds value when you need to use one credential in many blocks (change it once), or when you want to select between credentials dynamically using a Condition block.

Yes. Set the Operation to 'List Credentials'. Optionally filter by provider using the Provider multiselect. Wire the credentials output into a ForEach loop to process each credential individually.

Yes. Reference <credential.credentialId> in your Function block's code. Note that the function will receive the raw UUID string — if you need the resolved token, the downstream block must handle the resolution (as integration blocks do). The Function block does not automatically resolve credential IDs.

The Select operation will throw an error at execution time: 'Credential not found'. The List operation will simply omit the deleted credential from the results. Update the Credential block to select a valid credential before re-running.

Credential

Common Questions

On this page