Skip to main content
Everything you can connect from the Sapt dashboard, you can also connect over the REST API. This is what you reach for when you onboard clients through your own app or funnel: you ask Sapt for a secure connect link for a provider like Meta, hand that link to your client, and poll until they finish signing in. The flow is the same for every OAuth provider — only the providerId changes.
There are two connection styles. OAuth providers (Meta, Gmail, Google Business Profile, …) use the connect-session flow below. API-key providers (see API-key integrations) take pasted credentials instead. The List integrations call tells you which style each provider uses via its authKind.

1. Discover what you can connect

Call List integrations to see every provider available to a Project and its current connection status. This is the authoritative source for the providerId values and each provider’s authKind.
Each entry includes the fields you need to drive a connect UI: For any oauth2 provider, mint a one-time connect link with Create a connect session. Pass the providerId from step 1.
  • connectUrl is the link you give your client. Opening it begins the OAuth consent flow and, on completion, lands them on a Sapt-hosted result page.
  • token identifies this session — use it to poll for completion in step 3.
  • clientInvite: true extends the link’s lifetime so it survives being emailed or embedded in an onboarding step, rather than expiring in minutes. Omit it for short-lived, same-session connects.

3. Poll for completion

The connect link finishes on Sapt’s side, not yours — so poll Get connect session status with the token until it leaves pending.

API-key integrations

Providers whose authKind is api_key (for example Stripe or Shopify) don’t use a connect link — you submit their credentials directly with Connect an API-key integration. OAuth providers reject this call, so always branch on authKind from step 1.

OAuth provider IDs

The most-requested OAuth providers and their exact ids — note the mix of hyphens and underscores:
Treat List integrations as the source of truth for providerId values and authKind. The set of providers and their availability depend on the Project, and ids are case- and separator-sensitive.

Keep going

Integrations

REST API Reference

Authentication