---
title: "Services Administration"
slug: "services-administration"
updated: 2026-07-09T13:13:41Z
published: 2026-07-09T13:13:41Z
canonical: "docs.unqork.io/services-administration"
stale: true
---

> ## Documentation Index
> Fetch the complete documentation index at: https://docs.unqork.io/llms.txt
> Use this file to discover all available pages before exploring further.

# Services Administration

The **Services Administration** page enables users to create, view, edit, and delete external API or authentication services. Examples of external services include Google Places API, Twilio API, OAuth2 Authentication Grants, and GPG Encryption/Decryption.

> [!NOTE]
> WSRBAC (workspace role-based access control) controls access to functions of Services Administration page. For more information on what roles can access and edit Services Administration data, view the [Creator Role Administration](/v1/docs/creator-role-administration) article.

> To learn how to add a service to the environment, view our [Administration Services - How to: Add a Service](/v1/docs/services-administration-how-to-add-a-service) article.

## Navigating to a Service

After creating a service, Creators can access the service's management page to edit service info, workspace access, service type, and more.

To access and edit a service from the Services Administration page:

1. In the **Services Administration** list, navigate to the service you want to view or edit.
2. In the **Actions** column, click **Action**.
3. Select **Open**. ![Services administration interface displaying various API services and their actions available.](https://cdn.us.document360.io/15548f06-2fba-434c-b0c1-5df88317dbd7/Images/Documentation/serviceAdminAccess.webp?sv=2026-02-06&spr=https&st=2026-11-06T21%3A38%3A10Z&se=2026-11-06T22%3A38%3A10Z&sr=c&sp=r&sig=VAt0iGR33kK%2F8Ivt%2FFnantE5TZ6SzjtjM5OmHZ6JOns%3D)The service page displays.

## Service Settings

Service InfoManage AccessService TypeRequest & ResponseEndpointsLogging

## Service Info

The Service Info section lets you name the service and choose whether it's only available for server-side execution.

[![Service administration interface displaying service details and configuration options for an API.](https://cdn.us.document360.io/15548f06-2fba-434c-b0c1-5df88317dbd7/Images/Documentation/serviceInfoExample.webp?sv=2026-02-06&spr=https&st=2026-11-06T21%3A38%3A10Z&se=2026-11-06T22%3A38%3A10Z&sr=c&sp=r&sig=VAt0iGR33kK%2F8Ivt%2FFnantE5TZ6SzjtjM5OmHZ6JOns%3D)](https://cdn.us.document360.io/15548f06-2fba-434c-b0c1-5df88317dbd7/Images/Documentation/servicesAdmin%20serviceInfo.jpg?sv=2026-02-06&spr=https&st=2026-11-06T21%3A38%3A10Z&se=2026-11-06T22%3A38%3A10Z&sr=c&sp=r&sig=VAt0iGR33kK%2F8Ivt%2FFnantE5TZ6SzjtjM5OmHZ6JOns%3D)

| Setting | Description |
| --- | --- |
| **Service Title*** | Enter the name of the service. A descriptive title helps other Creators understand the service. *This field is required. |
| **Description** | Enter a description of the service. |
| **Service Name*** | The permanent system-name for the service. This value is for reference and cannot be changed. |
| **Allow Service Execution Server Side Only** | Set to ![](https://cdn.us.document360.io/15548f06-2fba-434c-b0c1-5df88317dbd7/Images/Documentation/toggle_ON(10).png?sv=2026-02-06&spr=https&st=2026-11-06T21%3A38%3A10Z&se=2026-11-06T22%3A38%3A10Z&sr=c&sp=r&sig=VAt0iGR33kK%2F8Ivt%2FFnantE5TZ6SzjtjM5OmHZ6JOns%3D) **(ON)** to prevent the service from being used in modules with the **Server-Side Execution Only** setting set to ![](https://cdn.us.document360.io/15548f06-2fba-434c-b0c1-5df88317dbd7/Images/Documentation/toggle_OFF(6).png?sv=2026-02-06&spr=https&st=2026-11-06T21%3A38%3A10Z&se=2026-11-06T22%3A38%3A10Z&sr=c&sp=r&sig=VAt0iGR33kK%2F8Ivt%2FFnantE5TZ6SzjtjM5OmHZ6JOns%3D) **(OFF)****.** > [!WARNING] > When set to ![](https://cdn.us.document360.io/15548f06-2fba-434c-b0c1-5df88317dbd7/Images/Documentation/toggle_ON(10).png?sv=2026-02-06&spr=https&st=2026-11-06T21%3A38%3A10Z&se=2026-11-06T22%3A38%3A10Z&sr=c&sp=r&sig=VAt0iGR33kK%2F8Ivt%2FFnantE5TZ6SzjtjM5OmHZ6JOns%3D) **(ON)**, the service is configurable in non server-side modules, but it does not function in Express View. |

## Manage Access

The Manage Access section controls whether the environment or specific workspaces can use the service.

[![Manage access settings for the Example Service API, including sharing options.](https://cdn.us.document360.io/15548f06-2fba-434c-b0c1-5df88317dbd7/Images/Documentation/manageAccessExample.webp?sv=2026-02-06&spr=https&st=2026-11-06T21%3A38%3A10Z&se=2026-11-06T22%3A38%3A10Z&sr=c&sp=r&sig=VAt0iGR33kK%2F8Ivt%2FFnantE5TZ6SzjtjM5OmHZ6JOns%3D)](https://cdn.us.document360.io/15548f06-2fba-434c-b0c1-5df88317dbd7/Images/Documentation/servicesAdmin%20manageAccess.jpg?sv=2026-02-06&spr=https&st=2026-11-06T21%3A38%3A10Z&se=2026-11-06T22%3A38%3A10Z&sr=c&sp=r&sig=VAt0iGR33kK%2F8Ivt%2FFnantE5TZ6SzjtjM5OmHZ6JOns%3D)

| Setting | Description |
| --- | --- |
| **Share to** | Grant service access to the environment, or select one or more workspaces where you want to share the service. > [!CAUTION] > Removing Environment or Workspaces access to a service breaks configurations using that service in the removed workspaces. |

## Service Type

Use the Service Type section to set up the service connection.

[![Service administration interface showing authentication options and service details for API.](https://cdn.us.document360.io/15548f06-2fba-434c-b0c1-5df88317dbd7/Images/Documentation/serviceTypeExample.webp?sv=2026-02-06&spr=https&st=2026-11-06T21%3A38%3A10Z&se=2026-11-06T22%3A38%3A10Z&sr=c&sp=r&sig=VAt0iGR33kK%2F8Ivt%2FFnantE5TZ6SzjtjM5OmHZ6JOns%3D)](https://cdn.us.document360.io/15548f06-2fba-434c-b0c1-5df88317dbd7/Images/Documentation/servicesAdmin%20serviceType.jpg?sv=2026-02-06&spr=https&st=2026-11-06T21%3A38%3A10Z&se=2026-11-06T22%3A38%3A10Z&sr=c&sp=r&sig=VAt0iGR33kK%2F8Ivt%2FFnantE5TZ6SzjtjM5OmHZ6JOns%3D)

| Setting | Description |
| --- | --- |
| **Service Type** | Specify the type of service you want to connect to. The service type controls what settings are available for the authentication method. Service types include: - **Authentication**: The Authentication service type lets Creators select from a predefined list of services, like OAuth 2.0 Client Credentials Grant, Google Places, Plaid, and so on. - **Encryption**: Connect using the GNU Privacy Guard (GPG) encryption method. - **FTP**: Connect using a Secure File Transfer Protocol. |
| **Service Protocol + Host** | Enter the service's endpoint to connect to Unqork. For example, `https://places.googleapis.com/v1/places/` |
| **Authentication Method*** | The Authentication Method depends on the selected Service Type. |

#### Service Types

Unqork offers three service types: Authentication, Encryption, and FTP.

> To learn how to set up external APIs in detail, visit our [How to: Setup External APIs](/v1/docs/external-apis) article.

## Authentication Service Type Settings

Creators can set up access to dozens of services using the Authentication Service Type. Refer to each service's API access documentation to see which authentication method they use, and what keys must be obtained to access.

> [!NOTE]
> Client Secrets, passwords, and other service information are encrypted and stored in the local database.

Using the menu below, select a service to discover its settings:

### No Authentication

No Authentication provides support for SOAP Digital Signatures.

> To learn how to set up SOAP Digital Signatures, view our [Enabling Soap Digital Signatures](/v1/docs/services-administration-how-to-enable-soap-digital-signatures) article in the Doc Hub.

### OAuth2 Client Credentials Grant

Use the OAuth2 Client Credentials grant when applications request an access token to access their own resources.

> To learn more about the OAuth 2.0 Client Credentials Grant, view the following documentation: [https://www.oauth.com/oauth2-servers/access-tokens/client-credentials/](https://www.oauth.com/oauth2-servers/access-tokens/client-credentials/).

| Setting | Description |
| --- | --- |
| Access Token URL | Enter the URL that provides the OAuth Access Token. For example, `https://account-d.docusign.com/oauth/token`. |
| Client ID | Enter the Client ID provided by the service. Here's an example of a Client ID from Okta: `0oa2hl2inow5Uqc6c357.` |
| Client Secret | Enter the Client Secret value provided by the service. Client Secrets commonly use cryptographically-generated values to improve access security. |
| Scope | Enter the access Scope value. Available scopes are dependent on the service. For example, Slack provides the following scopes: `read`, `write`, and `history`. |
| Send Client ID/Secret in Body Instead of Header | When set to ![](https://cdn.us.document360.io/15548f06-2fba-434c-b0c1-5df88317dbd7/Images/Documentation/image(43).png?sv=2026-02-06&spr=https&st=2026-11-06T21%3A38%3A10Z&se=2026-11-06T22%3A38%3A10Z&sr=c&sp=r&sig=VAt0iGR33kK%2F8Ivt%2FFnantE5TZ6SzjtjM5OmHZ6JOns%3D)(**checked**), it sends the Client ID and Client Secret values in the body of an HTTP request. |
| Perform Authentication Only | If authentication is valid, the token is sent back immediately. |
| Enable Token Persistence | When making requests, tokens are valid until their expiration time. At expiration, the token is no longer stored in Unqork's persisted storage. Requests after the expiration time no longer have an active token, and the service will attempt to retrieve a new one. If successful, the request continues and stores the new token. When set to ![](https://cdn.us.document360.io/15548f06-2fba-434c-b0c1-5df88317dbd7/Images/Documentation/image(43).png?sv=2026-02-06&spr=https&st=2026-11-06T21%3A38%3A10Z&se=2026-11-06T22%3A38%3A10Z&sr=c&sp=r&sig=VAt0iGR33kK%2F8Ivt%2FFnantE5TZ6SzjtjM5OmHZ6JOns%3D)(**checked**), this setting minimizes the number of additional authentication requests made and the number of tokens to maintain. It does not determine whether your requests are successful or not. |
| **Refresh Token** | When setting Enable Token Persistence to ![](https://cdn.us.document360.io/15548f06-2fba-434c-b0c1-5df88317dbd7/Images/Documentation/image(43).png?sv=2026-02-06&spr=https&st=2026-11-06T21%3A38%3A10Z&se=2026-11-06T22%3A38%3A10Z&sr=c&sp=r&sig=VAt0iGR33kK%2F8Ivt%2FFnantE5TZ6SzjtjM5OmHZ6JOns%3D)(**checked**), the Refresh Token button displays. Click this button when an issue occurs with the connected service or when your token is revoked. Clicking this button refreshes the token so you can continue to make requests. |
| Enable Mutual TLS | When set to ![](https://cdn.us.document360.io/15548f06-2fba-434c-b0c1-5df88317dbd7/Images/Documentation/image(43).png?sv=2026-02-06&spr=https&st=2026-11-06T21%3A38%3A10Z&se=2026-11-06T22%3A38%3A10Z&sr=c&sp=r&sig=VAt0iGR33kK%2F8Ivt%2FFnantE5TZ6SzjtjM5OmHZ6JOns%3D)(**checked**), it enables the mLTS (Mutual Transport Layer Security) certificate selection. > To learn how to add and manage certificates using Certificate Management, view our [Certificate Management](/v1/docs/certificate-management) article in the Doc Hub. |

### OAuth2 Password Grant

The OAuth 2.0 Password Grant exchange's the user's username and password for an access token.

> To learn more about the OAuth 2.0 Password Grant, view the following documentation: [https://www.oauth.com/oauth2-servers/access-tokens/password-grant/](https://www.oauth.com/oauth2-servers/access-tokens/password-grant/).

| Setting | Description |
| --- | --- |
| Access Token URL | Enter the URL that provides the OAuth Access Token**.** For example, `https://account-d.docusign.com/oauth/token`. |
| Client ID | Enter the Client ID provided by the service. Here's an example of a Client ID from Okta: `0oa2hl2inow5Uqc6c357`. |
| Client Secret | Enter the Client Secret value provided by the service. Client Secrets commonly use cryptographically-generated values to improve access security. |
| Scope | Enter the access Scope value. Available scopes are dependent on the service. For example, Slack provides the following scopes: `read, write, `and `history.` |
| Send Client ID/Secret in Body Instead of Header | When set to ![](https://cdn.us.document360.io/15548f06-2fba-434c-b0c1-5df88317dbd7/Images/Documentation/image(43).png?sv=2026-02-06&spr=https&st=2026-11-06T21%3A38%3A10Z&se=2026-11-06T22%3A38%3A10Z&sr=c&sp=r&sig=VAt0iGR33kK%2F8Ivt%2FFnantE5TZ6SzjtjM5OmHZ6JOns%3D)(**checked**), it sends the Client ID and Client Secret values in the body of an HTTP request. |
| Send authentication body as 'application/json' instead of 'application/x-www-form-urlencoded' (uncommon) | When set to ![](https://cdn.us.document360.io/15548f06-2fba-434c-b0c1-5df88317dbd7/Images/Documentation/image(43).png?sv=2026-02-06&spr=https&st=2026-11-06T21%3A38%3A10Z&se=2026-11-06T22%3A38%3A10Z&sr=c&sp=r&sig=VAt0iGR33kK%2F8Ivt%2FFnantE5TZ6SzjtjM5OmHZ6JOns%3D)(**checked**), encodes the authentication body as JSON. |
| Username | Enter the username used to access the service. |
| Password | Enter the password used to access the service. |
| Perform Authentication Only | If authentication is valid, the token is sent back immediately. |
| Enable Mutual TLS | When set to ![](https://cdn.us.document360.io/15548f06-2fba-434c-b0c1-5df88317dbd7/Images/Documentation/image(43).png?sv=2026-02-06&spr=https&st=2026-11-06T21%3A38%3A10Z&se=2026-11-06T22%3A38%3A10Z&sr=c&sp=r&sig=VAt0iGR33kK%2F8Ivt%2FFnantE5TZ6SzjtjM5OmHZ6JOns%3D)(**checked**), it enables the mLTS (Mutual Transport Layer Security) certificate selection. > To learn how to add and manage certificates using Certificate Management, view our [Certificate Management](/v1/docs/certificate-management) article in the Doc Hub. |

### OAuth 2 JWT Bearer Grant

The OAuth 2.0 Bearer Grant uses a JSON Web Token to carry additional information in the payload.

> To learn more about the OAuth 2 JWT Bearer Format, view the following documentation: [https://datatracker.ietf.org/doc/html/rfc7523](https://datatracker.ietf.org/doc/html/rfc7523).

| Setting | Description |
| --- | --- |
| Access Token URL | Enter the URL that provides the OAuth Access Token. For example, `https://account-d.docusign.com/oauth/token.` |
| Issuer (Client ID) | Enter the Client ID provided by the service. Here's an example of a Client ID from `Okta: 0oa2hl2inow5Uqc6c357.` |
| Subject | Enter the principal of the JWT; this is typically the user ID. |
| Audience | The audience parameter is a list of case-sensitive URLs that cannot contain whitespaces. For example, `["https://api.my-cloud.com/user", "https://some-tenant.my-cloud.com/"]`. |
| Scope(s) to access | Enter the access Scope value. Available scopes are dependent on the service. For example, Slack provides the following scopes: `read, write, and history`. |
| Token Expires in (seconds) | Set the amount of time before the access token expires, in seconds. For example, to make a token expire in 90 minutes, enter 5400. (There are 5,400 seconds in 90 minutes.) Default token expiration is 60 minutes. |
| Signing Algorithm | Specify an algorithm. he most common signing algorithms for JWTs are HS256 (HMAC using SHA256) and RS256 (RSA using SHA256). > For more information on signing algorithm, view this link: [https://www.npmjs.com/package/jsonwebtoken#algorithms-supported](https://www.npmjs.com/package/jsonwebtoken#algorithms-supported). |
| Shared/Private Key | Enter the key used to access the service. |
| Perform Authentication Only | If authentication is valid, the token is sent back immediately. |
| Enable Mutual TLS | When set to ![](https://cdn.us.document360.io/15548f06-2fba-434c-b0c1-5df88317dbd7/Images/Documentation/image(43).png?sv=2026-02-06&spr=https&st=2026-11-06T21%3A38%3A10Z&se=2026-11-06T22%3A38%3A10Z&sr=c&sp=r&sig=VAt0iGR33kK%2F8Ivt%2FFnantE5TZ6SzjtjM5OmHZ6JOns%3D)(**checked**), it enables the mLTS (Mutual Transport Layer Security) certificate selection. > To learn how to add and manage certificates using Certificate Management, view our [Certificate Management](/v1/docs/certificate-management) article in the Doc Hub. |

### OAuth2 JWT Client Credential Grant Extended

The OAuth 2.0 Client Credential grant uses a JSON Web Token to carry additional information in the payload.

| Setting | Description |
| --- | --- |
| Access Token URL | Enter the URL that provides the JWT Access Token. For example, `https://account-d.docusign.com/oauth/token.` |
| Client ID | Enter the Client ID provided by the service. Here's an example of a Client ID from Okta: `0oa2hl2inow5Uqc6c357.` |
| Module ID | The module ID associated with this service. |
| Secret key for user authorization JWT signing | Enter the key used to authorize the JSON Web Token signing. |
| Encryption key for user authorization header | Enter the encryption key value used to authorize the user. |
| Certificate Pem | The certificate containing the Private Key. |
| Private Key Pem | The key contained in the certificate. |
| Enable Mutual TLS | When set to ![](https://cdn.us.document360.io/15548f06-2fba-434c-b0c1-5df88317dbd7/Images/Documentation/image(43).png?sv=2026-02-06&spr=https&st=2026-11-06T21%3A38%3A10Z&se=2026-11-06T22%3A38%3A10Z&sr=c&sp=r&sig=VAt0iGR33kK%2F8Ivt%2FFnantE5TZ6SzjtjM5OmHZ6JOns%3D)(**checked**), it enables the mLTS (Mutual Transport Layer Security) certificate selection. > To learn how to add and manage certificates using Certificate Management, view our [Certificate Management](/v1/docs/certificate-management) article in the Doc Hub. |

### Bearer Token

Bearer authentication uses security tokens called bearer tokens. Bearer tokens are cryptic strings generated by the server in response to a login request.

| Setting | Description |
| --- | --- |
| Bearer Token | Enter the bearer token value provided by the external service. |
| Enable Mutual TLS | When set to ![](https://cdn.us.document360.io/15548f06-2fba-434c-b0c1-5df88317dbd7/Images/Documentation/image(43).png?sv=2026-02-06&spr=https&st=2026-11-06T21%3A38%3A10Z&se=2026-11-06T22%3A38%3A10Z&sr=c&sp=r&sig=VAt0iGR33kK%2F8Ivt%2FFnantE5TZ6SzjtjM5OmHZ6JOns%3D)(**checked**), it enables the mLTS (Mutual Transport Layer Security) certificate selection. > To learn how to add and manage certificates using Certificate Management, view our [Certificate Management](/v1/docs/certificate-management) article in the Doc Hub. |

### WSSE Username Token Profile

A Web Services Security Extension is an extension of SOAP to apply security to Web services. It is a member of the Web service specifications and published by OASIS.

> To learn more about the WSSE Username Token Profile format, view the following documentation: [https://docs.oasis-open.org/wss/v1.1/wss-v1.1-spec-pr-UsernameTokenProfile-01.htm](https://docs.oasis-open.org/wss/v1.1/wss-v1.1-spec-pr-UsernameTokenProfile-01.htm).

| Setting | Description |
| --- | --- |
| Username | Enter the username used to access the service. |
| Password | Enter the password used to access the service. |
| Enable SOAP Digital Signature | A SOAP digital signature is a value computed with a cryptographic algorithm. When that value is sent as part of a request, it lets the recipient verify the security and integrity of the incoming data. > To learn how to set up SOAP Digital Signatures, view our [Enabling Soap Digital Signatures](/v1/docs/services-administration-how-to-enable-soap-digital-signatures) article in the Doc Hub. |

### Twilio

The Twilio REST API allows you to query metadata about your account and send text messages.

> To learn more about the Twilio API, view the following documentation: [https://www.twilio.com/docs/iam/api-keys](https://www.twilio.com/docs/iam/api-keys).

| Setting | Description |
| --- | --- |
| Account SID | Enter the 34-digit String Identifier (SID) key provided by the Twilio resource. |
| Auth Token | Enter the URL that provides the OAuth Access Token. For example, `https://account-d.docusign.com/oauth/token`. |
| Number | Enter the phone number assigned by Twilio to send text messages. |
| Express Domain | Enter the express domain assigned by Twilio. |

### Plaid

The Plaid service enables access to Plaid's technology data transfer platform for financial products.

> To learn more about the Plaid API, view the following the documentation: [https://plaid.com/docs/api/](https://plaid.com/docs/api/).

| Setting | Description |
| --- | --- |
| Client ID | Enter the Client ID provided by the service. Here's an example of a Client ID from Okta: `0oa2hl2inow5Uqc6c357`. |
| Public Key | Enter the static `public_key` provided by Plaid. > [!TIP] > Newer Plaid accounts might use the Plaid Link setting: [https://plaid.com/docs/link/#introduction-to-link](https://plaid.com/docs/link/#introduction-to-link). |
| Client Secret | Enter the Client Secret value provided by the service. Client Secrets commonly use cryptographically-generated values to improve access security. |
| Environment | Choose which Plaid environment you want to access. Environments include Sandbox, Development, and Production. > For more on environments, view the following Plaid documentation: [https://plaid.com/docs/api/#api-host](https://plaid.com/docs/api/#api-host) |

### Custom SOAP Header

The Custom SOAP header adds a header element to a SOAP request.

| Setting | Description |
| --- | --- |
| SOAP Header | Enter a custom value to include in the header of a SOAP request. |
| Enable SOAP Digital Signature | A SOAP digital signature is a value computed with a cryptographic algorithm. When that value is sent as part of a request, it lets the recipient verify the security and integrity of the incoming data. > To learn how to set up SOAP Digital Signatures, view our [Enabling Soap Digital Signatures](/v1/docs/services-administration-how-to-enable-soap-digital-signatures) article in the Doc Hub. |
| Enable Mutual TLS | When set to ![](https://cdn.us.document360.io/15548f06-2fba-434c-b0c1-5df88317dbd7/Images/Documentation/image(43).png?sv=2026-02-06&spr=https&st=2026-11-06T21%3A38%3A10Z&se=2026-11-06T22%3A38%3A10Z&sr=c&sp=r&sig=VAt0iGR33kK%2F8Ivt%2FFnantE5TZ6SzjtjM5OmHZ6JOns%3D)(**checked**), it enables the mLTS (Mutual Transport Layer Security) certificate selection. > To learn how to add and manage certificates using Certificate Management, view our [Certificate Management](/v1/docs/certificate-management) article in the Doc Hub. |

### Basic Auth

Basic Auth is the simplest method for creating authentication access in an HTTP Header.

> [!WARNING]
> Basic Authentication does not provide encryption or hashing for the transmitted credentials.

| Setting | Description |
| --- | --- |
| Username | Enter the username used to access the service. |
| Password | Enter the password used to access the service. |
| Enable Mutual TLS | When set to ![](https://cdn.us.document360.io/15548f06-2fba-434c-b0c1-5df88317dbd7/Images/Documentation/image(43).png?sv=2026-02-06&spr=https&st=2026-11-06T21%3A38%3A10Z&se=2026-11-06T22%3A38%3A10Z&sr=c&sp=r&sig=VAt0iGR33kK%2F8Ivt%2FFnantE5TZ6SzjtjM5OmHZ6JOns%3D)(**checked**), it enables the mLTS (Mutual Transport Layer Security) certificate selection. > To learn how to add and manage certificates using Certificate Management, view our [Certificate Management](/v1/docs/certificate-management) article in the Doc Hub |

### Canada Post

The Canada Post service enables access to the AddressComplete API. This API enables the [Address Search](/v1/docs/address-search-component) component to search for addresses.

> To learn more about the Canda Post API, view the following documentation: [https://www.canadapost-postescanada.ca/ac/support/api/addresscomplete-interactive-find/](https://www.canadapost-postescanada.ca/ac/support/api/addresscomplete-interactive-find/).

> To learn how to enable the [Address Search](/v1/docs/address-search-component) component using Canada Post, view our [Enabling Address Search Using Address Services](/v1/docs/enabling-address-search-using-address-services) article in the Doc Hub.

| Setting | Description |
| --- | --- |
| API Key | Enter the API key provided by the Canada Post service. |

### Google Places

The Google Places service enables access to requests for location data. This API enables the [Address Search](/v1/docs/address-search-component) component to search for addresses.

> To learn more about the Google Places API, view the following documentation: [https://developers.google.com/maps/documentation/places/web-service/overview](https://developers.google.com/maps/documentation/places/web-service/overview).

> To learn how to enable the [Address Search](/v1/docs/address-search-component) component using Canada Post, view our [Enabling Address Search Using Address Services](/v1/docs/enabling-address-search-using-address-services) article in the Doc Hub.

| Setting | Description |
| --- | --- |
| API Key | Enter the API key provided by the Google Places service. |

### Amazon S3

Authenticate with an Amazon S3 bucket using an Access Key ID and Secret Access Key. You’ll also set up the required Amazon S3 region.

> To learn more about the Amazon S3 service, view the following documentation: [https://docs.aws.amazon.com/AmazonS3/latest/userguide/GetStartedWithS3.html](https://docs.aws.amazon.com/AmazonS3/latest/userguide/GetStartedWithS3.html).

| Setting | Description |
| --- | --- |
| Access Key ID | Amazon’s Access Key ID is public and can be shared. It can be used with the Secret Access Key to configure authentication. |
| Secret Access Key | Use your Amazon S3 bucket’s Secret Access Key in association with the Access Key ID to authenticate your bucket. |
| Region | The supported region of your Amazon S3 bucket. > To learn more about supported Amazon regions, view the following link: [Regional and Zonal endpoints for directory buckets - Amazon Simple Storage Service](https://docs.aws.amazon.com/AmazonS3/latest/userguide/s3-express-Regions-and-Zones.html). |

### Azure Blob Storage

Authenticate with Azure Blob Storage using your connection string(s).

> To learn more about the Google Places API, view the following documentation: [https://developers.google.com/maps/documentation/places/web-service/overview](https://developers.google.com/maps/documentation/places/web-service/overview).

| Setting | Description |
| --- | --- |
| Connection String | Use your Azure connection string, found in your Azure Portal, to authenticate with Azure Blob Storage. |

### OpenID Connect (OIDC)

OIDC is a secure exchange of information between an OpenID Provider (OP) and Unqork. The OP is any SSO provider, such as Okta, Microsoft Entra ID, or Amazon Cognito.

> To learn more about OpenID Connect, view the following documentation: [https://openid.net/developers/how-connect-works/](https://openid.net/developers/how-connect-works/).

> To learn more about OIDC in Unqork, visit our [OpenID Connect (OIDC)](/v1/docs/openid-connect-oidc) article in the Doc Hub.

| Setting | Description |
| --- | --- |
| Enable Mutual TLS | When set to (**checked**), it enables the mLTS (Mutual Transport Layer Security) certificate selection. > To learn how to add and manage certificates using Certificate Management, view our [Certificate Management](/v1/docs/certificate-management) article in the Doc Hub |

### Hyperscience

The Hyperscience API provides access to the Hyperscience SaaS platform for automating document classification, identification, and extraction.

> To learn more about the Hyperscience API, view the following documentation: [https://docs.hyperscience.com/#getting-started-guide](https://docs.hyperscience.com/#getting-started-guide).

| Setting | Description |
| --- | --- |
| API Key | Enter the API key provided by the Hyperscience service. |
| Enable Mutual TLS | When set to ![](https://cdn.us.document360.io/15548f06-2fba-434c-b0c1-5df88317dbd7/Images/Documentation/image(43).png?sv=2026-02-06&spr=https&st=2026-11-06T21%3A38%3A10Z&se=2026-11-06T22%3A38%3A10Z&sr=c&sp=r&sig=VAt0iGR33kK%2F8Ivt%2FFnantE5TZ6SzjtjM5OmHZ6JOns%3D)(**checked**), it enables the mLTS (Mutual Transport Layer Security) certificate selection. > To learn how to add and manage certificates using Certificate Management, view our [Certificate Management](/v1/docs/certificate-management) article in the Doc Hub |

### HMAC

HMAC is a key-hashed message authentication code used to verify data integrity and authenticity of a data request.

> To learn more about HMAC, view the following documentation: [https://datatracker.ietf.org/doc/html/rfc2104](https://datatracker.ietf.org/doc/html/rfc2104).

> To learn how to set up an HMAC service in Unqork, view our [How to: Set Up HMAC (Hashed Key) Authentication](/v1/docs/how-to-set-up-hmac-hashed-key-authentication) article in the Doc Hub.

| Setting | Description |
| --- | --- |
| HMAC Private Key (Armored) | Enter the Base-64 encoded string HMAC key associated with the service account. |

## Encryption Service Type Settings

Unqork supports the GNU Privacy Guard (GPG) method for encrypting and decrypting payloads.

[![A static image displaying the Encryoption Service Type](https://cdn.us.document360.io/15548f06-2fba-434c-b0c1-5df88317dbd7/Images/Documentation/servicesAdmin_encryptionST_thumb_0_0(3).jpg?sv=2026-02-06&spr=https&st=2026-11-06T21%3A38%3A10Z&se=2026-11-06T22%3A38%3A10Z&sr=c&sp=r&sig=VAt0iGR33kK%2F8Ivt%2FFnantE5TZ6SzjtjM5OmHZ6JOns%3D)](https://cdn.us.document360.io/15548f06-2fba-434c-b0c1-5df88317dbd7/Images/Documentation/servicesAdmin%20encryptionST(1).jpg?sv=2026-02-06&spr=https&st=2026-11-06T21%3A38%3A10Z&se=2026-11-06T22%3A38%3A10Z&sr=c&sp=r&sig=VAt0iGR33kK%2F8Ivt%2FFnantE5TZ6SzjtjM5OmHZ6JOns%3D)

| Setting | Description |
| --- | --- |
| **Service Protocol + Host** | Enter the endpoint address for the service. |
| **Authentication Method*** | Set Encryption (GPG) or Decryption (GPG) as the service type's authentication method. |
| **Encryption (GPG)** | Insert the GPG Encryption value. > To learn how to setup an encrypted SFTP , view our [How to: Set up GPG Encryption for Files](/v1/docs/how-to-set-up-gpg-encryption-for-files) article. |
| **GPG Public Key (Armored)** | Enter the public key provided by the service that's encrypting the files. |
| **Decryption (GPG)** | Insert the GPG Decryption value. > To learn how to decrypt a file using GPG Encryption, view our [How to: Set up GPG Encryption for Files](/v1/docs/how-to-set-up-gpg-encryption-for-files) article. |
| **GPG Private Key (Armored)** | Enter the private key provided by the service that's decrypting the files. |

## FTP Service Type Settings

The File Transfer Protocol service type lets Creators connect their applications to an FTP or SFTP server.

[![A static image displaying the Services Administration FTP Service Type.](https://cdn.us.document360.io/15548f06-2fba-434c-b0c1-5df88317dbd7/Images/Documentation/servicesAdmin_serviceTypeFTP_thumb_0_0(3).jpg?sv=2026-02-06&spr=https&st=2026-11-06T21%3A38%3A10Z&se=2026-11-06T22%3A38%3A10Z&sr=c&sp=r&sig=VAt0iGR33kK%2F8Ivt%2FFnantE5TZ6SzjtjM5OmHZ6JOns%3D)](https://cdn.us.document360.io/15548f06-2fba-434c-b0c1-5df88317dbd7/Images/Documentation/servicesAdmin%20serviceTypeFTP(1).jpg?sv=2026-02-06&spr=https&st=2026-11-06T21%3A38%3A10Z&se=2026-11-06T22%3A38%3A10Z&sr=c&sp=r&sig=VAt0iGR33kK%2F8Ivt%2FFnantE5TZ6SzjtjM5OmHZ6JOns%3D)

| Setting | Description |
| --- | --- |
| **Authentication Method*** | Set FTP or SFTP as the service type's authentication method. > [!WARNING] > To improve security, use the SFTP method. Only use FTP if no other option is available. |
| **Host** | Enter the FTP/SFTP server or host address. |
| **Port** (FTP Only) | For FTP connections, enter the port value. Typical FTP port values are `20` (data port) and `21` (controlled port). > [!TIP] > SFTP uses port `22` by default. |
| **Username** | Enter the username or login value used to access the server. |
| **Password** | Enter the password value used to access the server. > [!NOTE] > SFTP connections using SSH keys might not require a password, or they might require both. |
| **SSH Private Key (.pem)** (SFTP Only) | Insert the private key in pem format. > [!NOTE] > If the key uses the PuTTY (.`ppk`) file format, convert it to .`pem` using a conversion tool. |
| **Private Key Passphrase** (SFTP Only) | If your SSH key uses a passphrase, enter it in this field. |

**FTP Service Type Resources**

- [Understand how SFTP authentication in Unqork works in our SFTP Authentication article](/v1/docs/secure-file-transfer-protocol-sftp-authentication).
- [Improve your SFTP integration with our Best Practices: FTP Integration article](/v1/docs/best-practices-secure-file-transfer-protocol-sftp-integration).
- [Use the Marketplace SFTP Upload Integration Template](/v1/docs/sftp-upload-integration-template).
- [Connect your SFTP/FTP service to the File Storage Component](/v1/docs/file-storage-component).

## Request & Response

[![API service configuration showing request and response details with highlighted sections.](https://cdn.us.document360.io/15548f06-2fba-434c-b0c1-5df88317dbd7/Images/Documentation/requestResponseExample.webp?sv=2026-02-06&spr=https&st=2026-11-06T21%3A38%3A10Z&se=2026-11-06T22%3A38%3A10Z&sr=c&sp=r&sig=VAt0iGR33kK%2F8Ivt%2FFnantE5TZ6SzjtjM5OmHZ6JOns%3D)](https://cdn.us.document360.io/15548f06-2fba-434c-b0c1-5df88317dbd7/Images/Documentation/servicesAdmin%20serviceType.jpg?sv=2026-02-06&spr=https&st=2026-11-06T21%3A38%3A10Z&se=2026-11-06T22%3A38%3A10Z&sr=c&sp=r&sig=VAt0iGR33kK%2F8Ivt%2FFnantE5TZ6SzjtjM5OmHZ6JOns%3D)

The Request and Response settings provide request headers, body, and response headers. Use these headers and body to provide required or additional information in the HTTP request made to the service. Values in these fields are sent with every request.

#### Request Headers

Request headers provide context about an HTTP request. They help define caching, authentication, and session state.

#### Request Body

Use the request body for create and update operations (POST, PUT, PATCH). The request body contains the resources to be created or updated.

> [!NOTE]
> Services might use the Request Body field in a GET request to define the data retrieved from a service.

#### Allowed Response Headers

Specify what header names will return in the HTTP response.

## Logging

[![Service administration interface showing logging settings and retention days configuration.](https://cdn.us.document360.io/15548f06-2fba-434c-b0c1-5df88317dbd7/Images/Documentation/loggingExample.webp?sv=2026-02-06&spr=https&st=2026-11-06T21%3A38%3A10Z&se=2026-11-06T22%3A38%3A10Z&sr=c&sp=r&sig=VAt0iGR33kK%2F8Ivt%2FFnantE5TZ6SzjtjM5OmHZ6JOns%3D)](https://cdn.us.document360.io/15548f06-2fba-434c-b0c1-5df88317dbd7/Images/Documentation/servicesAdmin%20serviceType.jpg?sv=2026-02-06&spr=https&st=2026-11-06T21%3A38%3A10Z&se=2026-11-06T22%3A38%3A10Z&sr=c&sp=r&sig=VAt0iGR33kK%2F8Ivt%2FFnantE5TZ6SzjtjM5OmHZ6JOns%3D)

Logging service requests provides Creators with additional information on when and how a service is used.

> To access and understand service logs, view our [Understanding Service Logs](/v1/docs/understanding-service-logs) article in the Doc Hub.

| Setting | Description |
| --- | --- |
| Capture Request and Response Bodies | Set to (**checked**) to enable logging for this service. |
| **Retention Days (defaults to 30 days)** | Enter a value to retain services for longer or less than 30 days. |
| **PagerDuty Service Key (for optional alerting)** | Enter a service key to integrate service logs with PagerDuty. > To learn more about PagerDuty API keys and service, view the following documentation: [https://support.pagerduty.com/docs/pagerduty-agent-integration-guide#send-an-event-to-pagerduty](https://support.pagerduty.com/docs/pagerduty-agent-integration-guide#send-an-event-to-pagerduty). |

#### Logging Resources

- [Access and understand logs using the Unqork API](/v1/docs/understanding-service-logs).
- [Review service logs using the Service Logs Dashboard tool](/v1/docs/service-logs-dashboard-tool).
- [Evaluate incoming HTTP Requests with the Logs Dashboard tool](/v1/docs/logs-dashboard-tool).

## Endpoints

[![Service API interface showing no defined endpoints and options to add one.](https://cdn.us.document360.io/15548f06-2fba-434c-b0c1-5df88317dbd7/Images/Documentation/endpointsExample.webp?sv=2026-02-06&spr=https&st=2026-11-06T21%3A38%3A10Z&se=2026-11-06T22%3A38%3A10Z&sr=c&sp=r&sig=VAt0iGR33kK%2F8Ivt%2FFnantE5TZ6SzjtjM5OmHZ6JOns%3D)](https://cdn.us.document360.io/15548f06-2fba-434c-b0c1-5df88317dbd7/Images/Documentation/servicesAdmin%20serviceType.jpg?sv=2026-02-06&spr=https&st=2026-11-06T21%3A38%3A10Z&se=2026-11-06T22%3A38%3A10Z&sr=c&sp=r&sig=VAt0iGR33kK%2F8Ivt%2FFnantE5TZ6SzjtjM5OmHZ6JOns%3D)

The Endpoints section lets Creators create, view, and manage endpoints directly in the Unqork platform.

To add an endpoint, click the **Add Endpoint** button.

### Understanding the New Endpoint Modal

[![Form for creating a new endpoint with fields for location, method, and description.](https://cdn.us.document360.io/15548f06-2fba-434c-b0c1-5df88317dbd7/Images/Documentation/endpointModalExample.webp?sv=2026-02-06&spr=https&st=2026-11-06T21%3A38%3A10Z&se=2026-11-06T22%3A38%3A10Z&sr=c&sp=r&sig=VAt0iGR33kK%2F8Ivt%2FFnantE5TZ6SzjtjM5OmHZ6JOns%3D)](https://cdn.us.document360.io/15548f06-2fba-434c-b0c1-5df88317dbd7/Images/Documentation/servicesAdmin%20serviceType.jpg?sv=2026-02-06&spr=https&st=2026-11-06T21%3A38%3A10Z&se=2026-11-06T22%3A38%3A10Z&sr=c&sp=r&sig=VAt0iGR33kK%2F8Ivt%2FFnantE5TZ6SzjtjM5OmHZ6JOns%3D)

| Setting | Description |
| --- | --- |
| **Location******* | Select the application where you want to create the endpoint. Applications with versioning enabled display as **Disabled** in the drop-down menu. This field is required to create an endpoint. |
| **Method******* | Select the `GET`, `POST`, `PUT`, or `DELETE` method and determine the path convention. This field is required to create an endpoint. |
| **Path******* | Enter the endpoint pathway to append to the **Service Protocol + host** field. For example, if your service protocol value is `https://api.openai.com/v1/`, and the endpoint you want to reach is `https://api.openai.com/v1/models/`, then enter `models/` into the **Path** field. This field is required to create an endpoint. |
| **Description** | Enter a service description for the endpoint. |
| **Inputs** | Define the alias and target input values for an endpoint. Alternatively, Creators can apply a pre-request **NJK** transform in place of a target input parameter. |
| ↳ | **Visual** | Use the Input’s **Visual** mapping table to predefine input parameters with alias and target values. This table must contain values is to create an endpoint. |
| ↳ | **Alias** | Define the Unqork **Alias** parameter. This is the parameter used by modules and Unqork applications to connect to an endpoint’s Target parameter. Alias parameters allow Creators to connect multiple endpoint target parameters to the same alias. For example, you might use an alias called `temp` in your module. Then map the alias to Ai-Company-1’s `temperature` parameter, and Ai-Company-2’s `aiTemperature` parameter. |
| **Target** | Define input parameters from the endpoint to match to the Unqork Alias parameter. For example, you could map the **Target** value to an AI company’s `temperature` endpoint parameter. |
| **New Input** | Click to add a new row to the **Visual** inputs table. |
| **Use a pre-request transform** | Check this setting to replace the Visual Inputs column with a Transform. Transforms support the Nunjucks (NJK) language. > Learn more about Nunjucks at the following website: [https://mozilla.github.io/nunjucks/](https://mozilla.github.io/nunjucks/) |
| **Outputs** | Define the alias and target output values. Alternatively, Creators can apply a post-request **NJK** transform in place of a target parameter. |
| ↳ | **Visual** | Use the Output’s **Visual** mapping table to predefine output parameters with alias and target values. This table must contain values is to create an endpoint. |
| ↳ | **Alias** | Define the Unqork **Alias** parameter. This is the parameter used by modules and Unqork applications to connect to an endpoint’s Source parameter. Alias parameters allow Creators to connect multiple endpoint target parameters to the same alias. For example, you might use an alias called `temp` in your module. Then map the Alias endpoint to a target endpoint’s `AI_Temperature` parameter. |
| **Target** | Define the output endpoint’s parameter from the endpoint to match to the Unqork Alias parameter. For example, you might have an Unqork Alias parameter named `output`, and your target endpoint might require that to be mapped to `outputs`. |
| **New Output** | Click to add a new row to the **Visual** Outputs table. |
| **Use a post-request transform** | Check this setting to replace the Visual Outputs Target column with a Transform. Transforms support the Nunjucks (NJK) language. > Learn more about Nunjucks at the following website: [https://mozilla.github.io/nunjucks/](https://mozilla.github.io/nunjucks/) |

APIs (application programming interfaces) are a set of protocols and definitions developers use to build and integrate application software. APIs act as the connective tissue between products and services.

Also known as Unqork Users, or Designer Users; is anyone who is inside the Unqork platform.

An OAuth Access Token is a string that the OAuth client uses to make requests to the resource server.

The client_id is a public identifier for apps

The client secret is a secret known only to the application and the authorization server. The client secret acts as the applications password to the server.

Scope is a tool that limits an application's access to a user's account. An application can request one or more scopes, this information is then presented to the user in the consent screen, and the access token issued to the application will be limited to the scopes granted.

JSON (JavaScript Object Notation) is an open standard file and data interchange format. Unqork uses JSON for submission (record) data.

An OAuth Access Token is a string that the OAuth client uses to make requests to the resource server.

Single Sign-On is an authentication scheme that enables users to use one set of login credentials across multiple services.

SFTP (Secure File Transfer Protocol) supports the transfer of files between an SFTP client and your server. Unlike FTP, it uses tunneling and performs transfers using a crytographic protocol to keep files secure.

FTP (File Transfer Protocol) supports the transfer of files between an FTP client and your server.

Privacy Enchanced Mail is a popular file format for storing and sending cryptographic keys.

Nunjucks is a flexible JavaScript templating engine that supports template inheritance, filters, and logic-based expressions for dynamic content rendering.

Nunjucks is a flexible JavaScript templating engine that supports template inheritance, filters, and logic-based expressions for dynamic content rendering.