Integrations

Connect TotalApp to third-party services — version control hosts, project trackers, communication platforms, and cloud APIs.

Version Control

Link your Git hosting accounts so terminal tools (Dev Hub, Graph View) can fetch repository data without re-entering credentials on each use.

Provider	Credential needed	Used in
GitHub	Personal Access Token (PAT) with `repo` scope	Dev Hub Terminal, Graph View git-stats commands
GitLab	Personal Access Token with `read_api` scope	Dev Hub Terminal
Bitbucket	App password with Repositories read permission	Dev Hub Terminal

Token scope

Grant only the minimum required scope. TotalApp reads repository metadata and commit history — it never writes to your repositories. A read-only PAT is sufficient for all features.

Ecommerce

Provider	Credential needed	Used in
Shopify	Admin API access token + Store URL	Shopify Integration screen, Ecommerce Reports AI Assistant

After entering the Shopify credentials, use the Test Connection button to verify the token and retrieve a live product / order count. A green indicator confirms the connection is healthy.

AI & Language APIs

Service	Key name	Used in
Anthropic (Claude)	`ANTHROPIC_API_KEY`	All AI writer, assistant, and agentic pipeline features
Cohere	`COHERE_API_KEY`	Storyteller writer (Cohere API mode)
Simplified.com	`SIMPLIFIED_API_KEY`	Blog, Article, Ad copy writer (Simplified API mode)
OpenAI	`OPENAI_API_KEY`	Image generation (DALL·E) in Image Creator
Stability AI	`STABILITY_API_KEY`	Image generation (Stable Diffusion) in Image Creator

Server environment

API keys are stored as server environment variables, not in the browser. Set them in your .env file or your hosting provider's secrets manager. They are never transmitted back to the client.

Communication

Provider	Credential needed	Used in
Slack	Bot token (`xoxb-…`) + Channel ID	Workflow notification node, Marketing Campaign alerts
SMTP	Host, Port, Username, Password	Configured in General Settings — used by all email-sending features

FAQ

Where are API keys stored?

All API keys are stored in the server's environment or .env file. They are never written to the browser's localStorage, cookies, or sent back in API responses.

Can I revoke a token without breaking TotalApp?

Yes — if you revoke an external token, the affected features will return an error prompting you to update the credentials in Integrations settings. No data is lost; just re-enter the new token.

Is OAuth supported for GitHub?

Not yet. GitHub, GitLab, and Bitbucket integrations currently use Personal Access Tokens. OAuth flow is planned for a future release.