Provider Connect

One-click OAuth or credential-based connections to popular services. FyVault stores, rotates, and syncs provider credentials automatically.

OAuth providers

Connect with a single click in the dashboard. FyVault handles the OAuth flow, stores the tokens, and refreshes them automatically before expiry.

Provider	Scopes managed
Stripe	API keys, webhook signing secrets
GitHub	Personal access tokens, app installations
Vercel	Deploy tokens, env variables
Cloudflare	API tokens, zone secrets

Credential-based providers

For providers that use API keys rather than OAuth, paste your credentials once. FyVault encrypts them and can rotate them on a schedule.

Provider	Credentials
AWS	Access key ID + secret access key
Twilio	Account SID + auth token
SendGrid	API key

Connecting via CLI

# OAuth — opens browser flow
fyvault provider connect stripe

# Credential-based
fyvault provider connect aws \
  --access-key-id AKIA... \
  --secret-access-key wJal...

Auto-rotation & sync

Once connected, FyVault rotates credentials on a configurable schedule and pushes updates to every environment that references them. Sync status is visible in the dashboard.

fyvault provider sync stripe
fyvault provider status

Disconnecting

fyvault provider disconnect stripe

This revokes the OAuth token (if applicable) and removes stored credentials. Secrets that were synced from this provider are preserved but will no longer auto-rotate.