Docs
Integrations
Per-Project connections for MuleSoft / Anypoint, Salesforce, Postman, GitHub, and Cursor.
Connected apps live on the Project
Open Integrations (app.orcaesb.com/integrations) and pick a Project. Credentials never cross Projects. Settings is for password and app preferences — not the integrations editor.
- Required for Ask: Cursor API key plus Anypoint Connected App client ID, client secret, and organization ID.
- Optional Salesforce: Connected App consumer key, secret, and instance URL.
- Optional loop: GitHub token and Postman API key.
How to write secrets
Paste fields on Integrations, or import orca-cockpit-vault.biscuit.yaml from Setup. Download /vault-template.yaml, fill the known keys, then import. Empty strings are skipped; unknown keys are ignored. Treat the file like a password and delete it after import.
Storage
Secrets are AES-256-GCM sealed into Clerk private metadata as per-Project maps. They are never written to public metadata. Cookie GET stays metadata-only (which keys are set). Values are not shown again on the website after save.