Every external connector — contract, security and health in one place.
Xero
Billing · oauth
OAuth2 client credentials. Read-led; draft-invoice writes only. Tenant-link required before any billing sync.
CSP / Leader Cloud
Billing · oauth
CSP partner credentials. Read-only subscription/renewal polling; no order provisioning writes.
UniFi
Network · apiKey
Site Manager API key. Read-only site/device data. No network configuration writes.
Custom Webhook
Network · none
Generic inbound webhook receiver for future tools. No outbound writes. Signed-payload verification recommended when a producer is connected.
src/lib/integrationRegistry.js — no core workflow edits required. Each entry declares its auth mode, secrets, reads, writes, actions and security expectations.