Integrations

Configure platform keys under Dashboard → API Integration. Users connect accounts from the Lab Settings sheet or the Database / GitHub panels.

Supabase

Action	Where
OAuth connect	Integrations panel / Connect modal
Manual keys	Local or self-hosted projects
Disconnect	Same panel
Database tab	Schema, SQL, table rows
Migrations	Agent proposes SQL → user Allow or Skip
Tool	`survey_datastore`

Env: SUPABASE_OAUTH_*.
Callback: {APP_URL}/lab/oauth/supabase/return.

If Supabase is not connected and the user asks for auth or tables, the agent requests a connection instead of inventing credentials.

Action	Where
Authorize account	Integrations / Import from GitHub
Import repo	Creates a new Krikkit project from a branch
Link project	Connect an existing project to a repo
Push / sync	GitHub desk → Push (AI suggests an editable commit message)
Open PR	After push → Create Pull Request (editable title & description)
Disconnect	Project GitHub panel

Env: GITHUB_OAUTH_*.
Callback: {APP_URL}/lab/vcs/github/return.

Requires a real queue worker (QUEUE_CONNECTION=database or Redis — not sync).

Operators enable Unsplash and/or Pixabay under Dashboard → API Integration. Lab uses them server-side via lookup_visuals.

Unsplash has three fields (Application ID, Access Key, Secret). Search uses the Access Key only — see Stock Images.

UNSPLASH_APPLICATION_ID=
UNSPLASH_ACCESS_KEY=
UNSPLASH_SECRET_KEY=
PIXABAY_API_KEY=

Lab tools search_web and fetch_from_web run server-side.

Tool	Behavior
`search_web`	DuckDuckGo by default; Brave Search when a key is configured
`fetch_from_web`	Public page text + discovered image/asset URLs (no binary download into the VFS)

Optional Brave key under Dashboard → API Integration → Brave Search, or:

BRAVE_SEARCH_API_KEY=

DuckDuckGo needs no key. Private/local hosts are blocked on fetch.