integration_upsert
Store or replace an encrypted integration secret for a provider such as Google or Apple. Use this before login-link social sign-in needs that provider's credentials. Requires a company API key (aa_...) or an MCP OAuth access token and an active plan. Returns id and prefix (first four and last four characters of the secret). The full secret is not returned. The value is encrypted at rest. A later upsert with the same provider and the same label replaces that stored secret. A different label inserts another row. Each successful call consumes integration quota, including a repeat with the same secret. A missing subscription returns an error result with status 402 (subscription_required). Exhausted quota returns status 429 (quota_exceeded). Use integration_list to see which providers are already stored.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| label | No | Optional label. When omitted, the stored label is an empty string. The same provider and label replaces the existing secret. A different label stores another secret. | |
| secret | Yes | Provider secret to encrypt and store. Later reads return only a prefix, not this value. | |
| provider | Yes | Integration provider id, such as Google or Apple. Together with label, this selects the row to insert or replace. |