Integrations

What lives in the Integrations tab, and where everything else is configured.

The Integrations tab

The Integrations tab in the workspace is where a project gets its backend and its release checks. Each card shows its current status; open one to enable and configure it.

Python Backend — a FastAPI backend with its own PostgreSQL database and email/password authentication, all in-process (no external auth service, no OAuth). `DATABASE_URL` is injected automatically; supply your own to connect an external database instead. Values are managed in the Environment tab, with separate Dev and Prod sets.

File Storage — S3-backed storage for uploads, with presigned URLs for direct browser upload.

Supabase — connect your own Supabase project for PostgreSQL, Auth, Storage and Realtime.

Release checks

These run over your code and report into the **Problems** panel; several of them also gate publishing. See Validation Before Release.

• Testing — the agent writes and runs pytest, vitest and Playwright tests for what it builds, and repairs failures. Pre-publish gate per project, off by default, plus a Tests tab
• Security — Semgrep static analysis, dependency CVEs and hardcoded-secret detection (Trivy). High-severity findings block publishing
• Code Quality — Ruff for Python, Biome for the JS/TS frontend. High-severity security rules block publishing; everything else is advisory
• Deep Quality (SonarQube) — whole-project analysis at publish time. High-severity findings and high-probability security hotspots block publishing
• Dynamic Security Scan (DAST) — OWASP ZAP attacks a throwaway copy of the running app, never your live site: security headers, CORS, cookie flags, information leakage. Advisory. Web App backends only
• API Lint (OpenAPI) — Spectral lints the generated OpenAPI contract. Advisory. Backend apps only

Browser sits in this tab too, but it is not a check: it downloads an existing website — pages, styles, scripts, images and fonts — so the agent can rebuild it in your project's stack.

Configured elsewhere

• **GitHub** — from the **Git** panel in the project toolbar, not this tab. See GitHub Integration
• **Notifications** — **Settings → Notifications**, per event type across Email, Slack, Discord and Telegram. See Notifications
• **External REST APIs** — there is no REST connector to fill in. Describe the API in chat, keep its credentials in the **Environment** tab, and the agent writes the client into your backend. See Connecting REST APIs

Projects created before the unified backend integration may still show a Local PostgreSQL card. It keeps working; new projects use Python Backend instead.