Managing API Credentials
This guide explains how to create, manage, and use API Credentials within the Bourne AI console. Credentials allow your agents to securely authenticate with external services when using integrated tools like Gmail, Outlook, YouTube, Instagram, and more.
Why Use Credentials?
Instead of embedding sensitive API keys or tokens directly into your agent instructions (which is insecure and difficult to manage), you can store them securely as Credentials. When an agent needs to make an authenticated API call, you simply assign the appropriate credential to it.
This approach offers:
- Security: Sensitive keys are stored securely and not exposed in agent configurations.
- Reusability: The same credential can be used by multiple agents across different workflows.
- Manageability: Update an API key in one place (the credential), and all agents using it will automatically use the updated key.
Accessing the Credentials Section
- Navigate to Settings: From the main dashboard or side menu, go to the "Settings" section.
- Select Credentials: Within the Settings options, click on "API Credentials".
This will display a list of your existing credentials.
Creating a New Credential
You can create credentials using either the intuitive Wizard Mode or the flexible Manual Mode.
- Click "Add Credential": On the API Credentials list page, click the "Add Credential" button
Wizard Mode (Recommended for Supported Services)
The Wizard mode simplifies the setup process, especially for common services that use OAuth2.
- Select Service Template (Optional): If you are connecting to a supported service (like Google, Slack, Microsoft, etc.), you can select its template. This pre-fills certain OAuth2 details like Authorization URL, Token URL, and common Scopes, saving you time. If your service isn't listed, you can still use the Wizard by selecting "Other" or proceed with Manual Mode.
- Enter Basic Details:
- Title: Give your credential a descriptive name (e.g., "My Google Calendar Access").
- Authentication Type: The Wizard primarily focuses on OAuth2 (Authorization Code) when using templates, but also supports other types if "Other" is selected.
- Fill in Required Fields: Based on the template or your selection, the Wizard will guide you through entering necessary details:
- For OAuth2: Client ID, Client Secret, and Scopes (adjust pre-filled scopes if needed).
- For other types (if 'Other' selected): Follow prompts for API Key, Bearer Token, or Basic Auth details (see Manual Mode section below for field descriptions).
- Save and Connect (OAuth2):
- Click "Save Credential".
- You will see a "Connect" button. Clicking this redirects you to the provider's authorization page.
- Authorize the connection. You'll be redirected back, and Bourne automatically handles the token exchange (Access and Refresh tokens) and secure storage. Bourne also manages token refreshes automatically.
- Save (Other Types): Click "Save Credential".
Manual Mode
Manual mode gives you full control over all authentication parameters, suitable for services not covered by Wizard templates or when you need specific configurations.
- Choose Manual Mode: Select this option after clicking "Add Credential".
- Fill in the Details:
- Title: Give your credential a descriptive name.
- Authentication Type: Select the exact type the API uses:
- Bearer Token:
- Bearer Token Field: Paste your token.
- API Key:
- API Key Field: Paste your key.
- Header Name: Specify the HTTP header name (e.g.,
X-API-Key). - Add to: Choose
HeadersorQuery Params.
- Basic Authentication:
- Username: Enter the username.
- Password: Enter the password.
- OAuth2 (Authorization Code):
- Authorization URL: The provider's URL for user authorization.
- Token URL: The provider's URL for exchanging the code for tokens.
- Client ID: Your application's client ID from the provider.
- Client Secret: Your application's client secret from the provider.
- Scopes: The permissions your application requires, separated by spaces or commas as per the provider's documentation.
- Bearer Token:
- Save the Credential: Click "Save Credential".
- Connect (OAuth2): If you configured OAuth2, a "Connect" button will appear after saving. Follow the same connection process described in the Wizard Mode (Step 4) to authorize and enable automatic token management.
Service-Specific Setup Guides
The following guides show you how to set up credentials for specific services using the Bourne AI console UI. All OAuth2 services follow the same general pattern: select the service template, enter your Client ID and Client Secret, save, and connect.
Gmail
Tools Enabled: Manage Gmail email (list, read, send, search, mark as read)
UI Steps:
- Go to Settings → API Credentials → Add Credential
- Choose Wizard Mode
- In the platform search field, type "Gmail" and select it from the dropdown
- The form will auto-populate with:
- Auth Type: OAuth2
- Scopes:
gmail.readonly gmail.send gmail.modify(pre-filled, can be adjusted)
- Enter your Client ID and Client Secret (obtained from Google Cloud Console)
- Click Save Credential
- Click Connect to authorize through Google's OAuth flow
- Once connected, the credential will show as "Connected" with a green indicator
What Agents Can Do: Send emails, read inbox, search messages, manage labels, mark as read/unread
Outlook Email
Tools Enabled: Manage Outlook/Microsoft 365 email
UI Steps:
- Go to Settings → API Credentials → Add Credential
- Choose Wizard Mode
- Search for "Outlook" and select Outlook Email from the dropdown
- The form will auto-populate with:
- Auth Type: OAuth2
- Scopes:
Mail.ReadWrite Mail.Send(pre-filled)
- Enter your Client ID and Client Secret (from Azure AD App Registration)
- Click Save Credential
- Click Connect to authorize through Microsoft's OAuth flow
- Connection status will update to "Connected"
What Agents Can Do: Send emails, read messages, manage folders, search inbox
YouTube
Tools Enabled: Get comments, post replies, get channel info, search videos, upload videos
UI Steps:
- Go to Settings → API Credentials → Add Credential
- Choose Wizard Mode
- Search for "YouTube" and select it from the dropdown
- The form will auto-populate with:
- Auth Type: OAuth2
- Scopes:
youtube.force-ssl(pre-filled)
- Enter your Client ID and Client Secret (from Google Cloud Console with YouTube Data API enabled)
- Click Save Credential
- Click Connect to authorize
- Verify connection status shows "Connected"
What Agents Can Do: Fetch video comments, reply to comments, get channel statistics, search for videos, upload new videos
Tools Enabled: 13 Instagram Business tools including content publishing, comment moderation, insights
UI Steps:
- Go to Settings → API Credentials → Add Credential
- Choose Wizard Mode
- Search for "Instagram" and select it from the dropdown
- The form will auto-populate with:
- Auth Type: OAuth2
- Scopes:
instagram_business_basic instagram_business_manage_messages instagram_business_manage_comments instagram_business_content_publish instagram_business_manage_insights(pre-filled)
- Enter your Client ID and Client Secret (from Meta for Developers)
- Click Save Credential
- Click Connect to authorize through Instagram/Facebook OAuth
- Connection confirmed with green "Connected" status
What Agents Can Do: Get account info, retrieve media, publish posts, moderate comments, send private replies, view insights
Tools Enabled: Post to LinkedIn, get profile information
UI Steps:
- Go to Settings → API Credentials → Add Credential
- Choose Wizard Mode
- Search for "LinkedIn" and select it
- The form will auto-populate with:
- Auth Type: OAuth2
- Scopes:
openid profile w_member_social(pre-filled)
- Enter your Client ID and Client Secret (from LinkedIn Developer Portal)
- Click Save Credential
- Click Connect to authorize
- Verify "Connected" status
What Agents Can Do: Post text updates, share images/videos, retrieve user profile data
Google Meet
Tools Enabled: Create and manage Google Meet meetings
UI Steps:
- Go to Settings → API Credentials → Add Credential
- Choose Wizard Mode
- Search for "Google Meet" and select it
- The form will auto-populate with:
- Auth Type: OAuth2
- Scopes:
calendar calendar.events(pre-filled - Google Meet requires Calendar API)
- Enter your Client ID and Client Secret (from Google Cloud Console)
- Click Save Credential
- Click Connect to authorize
- Connection status will show "Connected"
What Agents Can Do: Schedule meetings, create instant meetings, manage meeting settings
Google Docs
Tools Enabled: Create, edit, read, list Google documents
UI Steps:
- Go to Settings → API Credentials → Add Credential
- Choose Wizard Mode
- Search for "Google Docs" and select it
- The form will auto-populate with:
- Auth Type: OAuth2
- Scopes:
documents drive(pre-filled)
- Enter your Client ID and Client Secret (from Google Cloud Console)
- Click Save Credential
- Click Connect to authorize
- Verify connection shows "Connected"
What Agents Can Do: Create new documents, edit existing docs with markdown, read document content, list user's documents
Canva
Tools Enabled: 9 Canva tools for design creation and management
UI Steps:
- Go to Settings → API Credentials → Add Credential
- Choose Wizard Mode
- Search for "Canva" and select it
- The form will auto-populate with:
- Auth Type: OAuth2
- Scopes:
asset:read asset:write brandtemplate:content:read brandtemplate:meta:read design:content:read design:content:write design:meta:read profile:read(pre-filled)
- Enter your Client ID and Client Secret (from Canva Developers)
- Click Save Credential
- Click Connect to authorize
- Connection confirmed with "Connected" status
What Agents Can Do: Create designs, upload assets, use brand templates, export designs, manage design content
Zoom (API Key Method)
Tools Enabled: Manage Zoom meetings
UI Steps:
- Go to Settings → API Credentials → Add Credential
- Choose Wizard Mode
- Search for "Zoom" and select it
- The form will show:
- Auth Type: API Key (Server-to-Server OAuth)
- Enter:
- API Key (or Client ID): Your Zoom Server-to-Server OAuth Client ID
- API Secret (or Client Secret): Your Zoom Client Secret
- Account ID: Your Zoom Account ID
- Click Save Credential
- No separate "Connect" step required - credentials are validated on first use
What Agents Can Do: Create meetings, list meetings, get meeting details, manage Zoom account settings
Twilio (API Key Method)
Tools Enabled: Send SMS, make voice calls, manage Twilio resources
UI Steps:
- Go to Settings → API Credentials → Add Credential
- Choose Wizard Mode
- Search for "Twilio" and select it
- The form will show:
- Auth Type: API Key
- Enter:
- Account SID: Your Twilio Account SID
- Auth Token (or API Key): Your Twilio Auth Token or API Key
- Click Save Credential
- No OAuth flow required - credentials saved directly
What Agents Can Do: Send SMS messages, make phone calls, retrieve message history, manage phone numbers
Browser Automation (Steel.dev)
Tools Enabled: Automated web browser interactions with live viewing
UI Steps:
- Go to Settings → API Credentials → Add Credential
- Choose Wizard Mode
- Search for "Browser Automation" and select it
- The form will show:
- Auth Type: Bearer Token
- Enter:
- Token: Your Steel API Key (from Steel.dev dashboard)
- Click Save Credential
- Token is saved securely
What Agents Can Do: Automate complex web interactions, fill forms, click elements, extract data from websites, generate screenshots
Workday (OAuth2 + Tenant URL)
Tools Enabled: Access Workday HR data (worker details, direct reports, organizations, tasks)
UI Steps:
- Go to Settings → API Credentials → Add Credential
- Choose Wizard Mode
- Search for "Workday" and select it
- The form will auto-populate with:
- Auth Type: OAuth2
- Enter:
- Client ID: Your Workday integration Client ID
- Client Secret: Your Workday Client Secret
- Tenant URL: Your Workday tenant URL (e.g.,
https://wd2-impl.workday.com)
- Click Save Credential
- Click Connect to authorize (if using OAuth2 flow)
- Verify "Connected" status
What Agents Can Do: Get worker information, search employees, retrieve organizational hierarchy, access tasks
SurveyMonkey (Bearer Token)
Tools Enabled: Manage SurveyMonkey surveys
UI Steps:
- Go to Settings → API Credentials → Add Credential
- Choose Wizard Mode
- Search for "SurveyMonkey" and select it
- The form will show:
- Auth Type: Bearer Token
- Enter:
- Access Token: Your SurveyMonkey Access Token
- Click Save Credential
- Token saved securely
What Agents Can Do: List surveys, retrieve responses, create surveys, manage survey data
Generic API Call (Custom API Key)
Tools Enabled: Call any API with custom authentication
UI Steps:
- Go to Settings → API Credentials → Add Credential
- Choose Wizard Mode or Manual Mode
- Search for "Call API" or select API Key auth type in Manual Mode
- The form will show:
- Auth Type: API Key
- Enter:
- API Key: Your custom API key or bearer token
- Header Name (optional): Specify custom header name (defaults to
X-API-KEY)
- Click Save Credential
- Key saved for use with API Call tool
What Agents Can Do: Authenticate with any REST API using your custom key
Selecting a Credential for an Agent Tool
Once a credential is created and connected, you can assign it to an agent that uses the corresponding tool:
- Edit the Agent Workflow: Navigate to the workflow containing the agent you want to configure (see Editing Agent Workflows documentation)
- Open the Agent's Configuration: Expand the panel for the specific agent
- Add the Tool: Search for and add the tool (e.g., "Gmail", "Outlook Email", "YouTube") from the tools dropdown
- Select Credential: A dropdown will appear next to the tool showing all credentials for that service
- Choose the Credential: Select the credential you created from the list
- Save Workflow Changes: Click to apply changes
Now when this agent uses the tool, it will automatically authenticate using the selected credential.
Managing Existing Credentials
Viewing Connection Status
In the Settings → API Credentials list, you'll see:
- Green "Connected" badge: OAuth2 credential successfully authorized
- No badge: API Key/Bearer Token credential (no connection needed)
- Expired/Error status: Token needs re-authorization
Reconnecting OAuth2 Credentials
If an OAuth2 credential shows as expired or disconnected:
- Click on the credential to edit it
- Click the Connect button again
- Re-authorize through the provider's OAuth flow
- Connection status will update to "Connected"
Updating Credentials
To update a credential's title or details:
- Go to Settings → API Credentials
- Click on the credential to edit
- Modify the Title or other editable fields (OAuth2 credentials only allow title changes)
- Click Save to update
Deleting Credentials
To remove a credential:
- Go to Settings → API Credentials
- Click on the credential to edit
- Click the Delete button at the bottom
- Confirm deletion
Note: Deleting a credential will break any agents currently using it. Make sure to update your workflows before deleting credentials in use.
Troubleshooting
"Connect" button doesn't work
- Check that your Client ID and Client Secret are correct
- Verify your OAuth application's Redirect URI includes:
https://app.bournelabs.ai/settings/credentials/redirect/{service} - Clear browser cookies and try again
OAuth authorization fails
- Ensure your OAuth app has the required scopes enabled
- Check that your account has permissions to authorize the app
- Verify the service's API is enabled in your developer console
Tool returns "Unauthorized" error
- Verify the credential is showing as "Connected" in the credentials list
- Try reconnecting the credential (click Edit → Connect)
- Check that the credential is correctly assigned to the agent's tool
Token expired errors
- OAuth2 tokens are automatically refreshed by Bourne
- If auto-refresh fails, manually reconnect the credential
- Check that your OAuth app's refresh token hasn't been revoked
USPTO Trademark Search
Overview
The USPTO Trademark Search tools allow you to search and retrieve trademark data from the United States Patent and Trademark Office directly from your agents.
Tools Available
- trademark_search_by_keyword: Search trademarks by name or keyword
- trademark_get_status: Get detailed trademark status by serial number
- trademark_search_by_owner: Find trademarks by owner name or postcode
- trademark_get_application_metadata: Retrieve complete trademark metadata
Setup Required
None! USPTO Trademark Search tools are ready to use immediately. No credential configuration is needed.
Simply:
- Create or edit an agent workflow
- Add any of the 4 USPTO Trademark Search tools
- Start searching trademarks right away
Example Uses
Brand Name Research:
Search for trademarks containing "TechStart" and tell me if the name is available
Competitor Analysis:
Find all trademarks owned by "Apple Inc" and show their current status
Trademark Status Check:
Get the full details for trademark serial number 88888888 including owner and registration date
Portfolio Audit:
Show me all active trademarks owned by "Microsoft Corporation"
Troubleshooting
No results returned
Possible causes:
- Trademark doesn't exist in USPTO database
- Serial number format incorrect (must be 8 digits)
- Search terms too specific
Solutions:
- Verify trademark exists at USPTO.gov
- Check serial number format (e.g., "88888888")
- Try broader search terms
Tools not appearing
Solution:
- Refresh the page
- Clear browser cache
- Contact support if tools still don't appear
Additional Resources
- USPTO Website: https://www.uspto.gov/trademarks
- Trademark Search: https://www.uspto.gov/trademarks/search
- Complete Tool Documentation: See Tools Reference