client.integrations for AgentFlow’s manifest-backed native integrations.
integration.fields to discover required credential field IDs; do not hard-code a field name from another integration. configure(...) replaces the full required set and write responses never include plaintext secret values.
test(...) performs a real provider request. It may incur provider rate limits even though AgentFlow chooses the cheapest authenticated probe. The result is recorded when a tenant integration row exists.
Choose the lifecycle from integration.credential_mode:
Remove tenant credentials when the integration should no longer use tenant overrides:
external_api_key integrations and soft-deletes the tenant override; it does not uninstall native tools or agents. A deployment-level fallback credential may remain available afterward, and the returned integration status tells you which source is active.
