Flow.Documentation
ProfessionalConnectionsSecrets and key vaults

Create and test an HTTP connection

6 steps± 4 minVideoVerified 22 Oct 2026
  1. Step 1 · Open your development environment
  2. Step 2 · Choose General HTTP API
  3. Step 3 · Fill in address, sign-in and key
  4. Step 4 · Test it with one call
  5. Step 5 · Run and read the answer
  6. Step 6 · The key can never be read back

A connection records another system's address and key once, for the whole workspace. Workflows and AI Colleagues use it with just a path; the key stays encrypted on the server. In this guide you create a connection with a bearer token, test it with one call and see that the key can never be read back.

Watch the whole guide as a video6 steps in one film
Step 1 / 6

Open your development environment

In the portal, under Environments, click Development, and there Open. Flow opens in a new tab and you are signed in straight away.

  1. Click Development
Open your development environment · Click Development
  1. Click Open ↗
Open your development environment · Click Open ↗
Step 2 / 6

Choose General HTTP API

Connections are at the bottom of the explorer. At the top are the systems with a ready-made connector; for any other REST API you choose General HTTP API.

  1. Click Connections
Choose General HTTP API · Click Connections
  1. Click General HTTP API
Choose General HTTP API · Click General HTTP API
Step 3 / 6

Fill in address, sign-in and key

The base URL is the part that is the same for every call. Under Authentication you choose how the key goes along: Bearer token puts it in the Authorization header, Custom header in a header you name (such as X-API-Key), Basic as user:password. Leave access on Read only: this connection only fetches data.

  1. In Name, type Wholesaler · stock
  2. In Base URL, type http://127.0.0.1:62349/partner
  3. In Authentication, choose Bearer token
  4. In Secret, type ••••••••
Fill in address, sign-in and key · In Name, type Wholesaler · stock; In Base URL, type http://127.0.0.1:62349/partner; In Authentication, choose Bearer token; In Secret, type ••••••••
Fill in address, sign-in and key · Access: read only.
  1. Click Save
Fill in address, sign-in and key · Click Save
Fill in address, sign-in and key · Your connection in the list: Read only, Key stored.
Step 4 / 6

Test it with one call

You test an HTTP connection by using it. Create a small workflow with the HTTP request step, choose your connection and fill in only the path: here /stock. Line up the steps and save.

  1. Click Add to General
Test it with one call · Click Add to General
  1. Click New workflow
Test it with one call · Click New workflow
  1. In Workflow name, type Test connection · wholesaler
Test it with one call · In Workflow name, type Test connection · wholesaler
  1. Click Add node
Test it with one call · Click Add node
  1. Click HTTP request
Test it with one call · Click HTTP request
  1. In Connection, choose Wholesaler · stock
  2. In URL or path, type /stock
  3. In Store the result as, type stock
Test it with one call · In Connection, choose Wholesaler · stock; In URL or path, type /stock; In Store the result as, type stock
  1. Click the dot of ‘Event trigger’
Test it with one call · Click the dot of ‘Event trigger’
  1. Click the dot of ‘HTTP request’
Test it with one call · Click the dot of ‘HTTP request’
  1. Click the step ‘Event trigger’
Test it with one call · Click the step ‘Event trigger’
  1. Click Align horizontally
Test it with one call · Click Align horizontally
  1. Click Save
Test it with one call · Click Save
Step 5 / 6

Run and read the answer

GET → 200 means: address and key are right. A 401 means the key is wrong; 404: the path or the base URL. Under Data after the run you find the answer, ready for the next step.

  1. Click Run
Run and read the answer · Click Run
Run and read the answer · GET → 200: the connection works.
Run and read the answer · The API's answer in the run's data.
Step 6 / 6

The key can never be read back

Open the connection again with Edit. The secret is empty: Flow never shows it, not even to you. Fill something in only when you want to replace the key; leaving it empty keeps the stored key.

  1. Click Connections
The key can never be read back · Click Connections
  1. Click Edit
The key can never be read back · Click Edit
The key can never be read back · Read only, key stored.
  1. Click Cancel
The key can never be read back · Click Cancel

This guide was carried out step by step on 22 Oct 2026 by an automated test on Flow (version 3e563176).