localhost. API keys are moved into the operating-system credential vault rather than stored in workflow JSON.
Gmail setup uses OAuth PKCE. Discord and Slack setup accept incoming webhook URLs and store those secrets in the same host-owned vault.
Manage a connection
- Choose Add connection, select the provider, and complete its setup.
- Give the connection a name that identifies its real account or destination.
- Use Test to verify current access.
- Select the named reference in a node.
- Review affected workflows before renaming or revoking.