Connect a partner's API
Your supplier or partner has a REST API with a base address and a key. You record it once as a connection; the key stays encrypted on the server. From then on any workflow calls the API with just a path, without ever seeing the key. You need: the API's base address and a bearer token.
Fill in the address and the key
The base URL is the part that is the same for every call. With Bearer token, Flow sends the key along as the Authorization header. Leave access on Read only if you only fetch data: Flow then refuses any call that would change something, even when a workflow or AI Colleague tries.
Create a workflow with an HTTP step
Create a new workflow and add HTTP request. Choose your connection: the URL field then becomes the path after the base URL, and the key goes along by itself. Under Store the result as you name the answer.
This guide was carried out step by step on 22 Oct 2026 by an automated test on Flow (version 3e563176).



















