Question

API keys in Code by Zapier

Forum|Forum|1 year ago
May 8, 2024
3 replies
529 views

TalosTheDigiton
Beginner

I’m using Code by Zapier to connect with an API that isn’t explicitly integrated with Zapier. I make a JavaScript call to the API, but the problem is that doing it this way leaves the API key stored in plain text in the zap. Is this not the intended use of Code by Zapier? Is there a workaround or some other step that I’ve missed in order to secure the authentication for the other API?

Thanks!

This post has been closed for comments. Please create a new post if you need help or have a question about this topic.

+14

Troy Tessalone
Zapier Orchestrator & Solution Partner
Forum|Forum|1 year ago
May 8, 2024

Hi @TalosTheDigiton

The Webhooks app can also be used to make API requests and handle authentication: https://zapier.com/apps/webhook/help

Security and Compliance at Zapier: https://help.zapier.com/hc/en-us/articles/8496181993613-Security-and-Compliance

⚡ Troy Tessalone - AutomationAce.com | Platinum Authorized Zapier Solution Partner | #1 Zapier Community Contributor

Like

T

TalosTheDigiton
Author
Beginner
Forum|Forum|1 year ago
May 9, 2024

Thanks @Troy Tessalone. The Webhooks app seems particularly useful for some use cases. I do see where I can add the API key to the headers, but again, it isn’t evident to me that this information will be encrypted like passwords. I assume that the headers of the Webhooks zap will be stored somewhere in Zapier’s system in plain text. The security and compliance article you linked also implies that it might be visible through the “comprehensive” logs as well. I’m happy to have my understanding corrected, but I’m concerned about leaving an API key or similar information in plain text like this.