Documentation
Connections
An authorization to reach an outside system, owned by the organization, granted to a department, bound to a workflow.
What a connection is
A connection is permission to reach a system outside PromptOne, together with the credential that does it. A person with the right to grant that access creates it. The builder never does, and never sees it.
The chain, end to end
- Somebody authorizes the connection. The organization owns it.
- An administrator grants it to a department.
- The builder declares a typed slot in the workflow: this step needs a mail connection.
- An administrator binds one of the granted connections to that slot.
- Publishing freezes which connection the slot points at.
- At run time the credential is decrypted for that one call, used, and never handed to the agent.
What happens when something is missing
The step refuses. A slot that is unbound, bound to the wrong type, disconnected or revoked stops the run at that point. There is no fallback to some other credential, and no silent skip.
Revoking a department's grant takes effect immediately, including on workflows that were published months ago. Access is checked when the step runs, not when it was authored.
Kinds of connection
| Kind | Notes |
|---|---|
| Hosted integrations | Named systems with commands already built for them, authorized by sign-in. |
| HTTP | Any system with an API. Requests are restricted to an allowed list of addresses, checked again on every redirect. |
| Database | Read-only sessions against a database you name. |
| Sub-workflow | Permission for one workflow to call another, including across departments. |
If the system you need is not already integrated, it is connected on request as part of onboarding.
How credentials are held
- Encrypted at rest with a key derived per record, so one leaked record does not expose the rest.
- Decrypted server side for a single call, never sent to a model and never shown in the interface.
- Every use is recorded, and a credential that stops working marks the connection as needing reauthorization rather than failing quietly.