Providers

A provider connection tells KeepSafe which service a key belongs to, so it can read what that key is doing.

Supported services

KeepSafe connects to:

• Developer platforms: GitHub, Postman
• Hosting and edge: Cloudflare, Vercel, Render
• Databases: Supabase, Neon, MongoDB Atlas
• AI: Anthropic, Gemini, OpenRouter
• Monitoring and email: Sentry, Resend

What KeepSafe can read depends on what each service shares. A connection shows which of these it reports: health, usage, quota and account details.

Connecting a service

1. Go to Providers and choose Connect provider.
2. Pick the service.
3. Use a credential already in your vault, or paste a new one. A new one is stored in the vault for you.
4. KeepSafe checks the key with the service. Nothing is saved unless the check passes.

Some services need more than one key, or ask which project or account to watch. KeepSafe asks for these as you go.

Usage and quota

Where a service reports limits, KeepSafe shows how much of each is used and when it resets. Usage is kept as daily totals, so you can compare this week with the last.

Health

Each connection has a status:

• Operational: the last check worked.
• Limit near: a quota is close to running out.
• Degraded or Suspended: the service reported a problem with the account.
• Error: the last checks failed. After several failures in a row, KeepSafe raises an alert.

Syncing

Connections are checked on a regular schedule. To refresh one straight away, open it and choose Sync now.

Removing a connection

Removing a connection stops KeepSafe from checking that service. The key itself stays in your vault until you delete it there.