- Integrations, and the connections created through them
- API keys, which can only reach that workspace’s connections
- A client ID and a list of allowed redirect URIs for the authorization flow
- Webhooks
- Members and their roles
- A plan, usage and billing
- Request logs
One workspace per environment
Create a separate workspace for each environment you run, for exampleacme-dev, acme-staging and acme-prod.
Each environment has its own workspace, with its own OAuth apps, API key and redirect URIs.
This keeps:
- Test connections out of production. Developers connecting their own accounts while testing never show up next to customer connections.
- Keys separate. A leaked development key can’t reach production data.
- OAuth apps separate. Many providers only allow one callback URL per app, or require review before production use. Separate apps per environment avoid both problems.
- Logs readable. Production logs aren’t mixed with local experiments.
github) can be the same in every workspace, so your code doesn’t change between environments. Only the API key, client ID and redirect URI do, and those belong in environment variables anyway.

