BusyBot
Search all guides

Reference · Credentials

Connect Twist to BusyBot

Used by 1 BusyBot node.

Type twistOAuth2Api 4 fields

Fields

FieldTypeRequiredNotes
Client ID
clientId		 string Yes Twist OAuth2 Client ID
Client Secret
clientSecret		 password Yes Twist OAuth2 Client Secret
Access Token
accessToken		 password Yes Twist OAuth2 access token
Refresh Token
refreshToken		 password No Twist OAuth2 refresh token for automatic renewal

Setting up Twist OAuth2 API

  1. In Twist OAuth2 API, create the credential this connection needs — the values listed in the table above. These are issued from your own Twist OAuth2 API account, usually under its developer, API or integrations settings.
  2. In BusyBot, open Credentials → Add credential and choose Twist OAuth2 API.
  3. Paste each value into the matching field and save.
  4. Add the Twist node to a workflow, select this credential, and run a simple operation to confirm it authenticates.

Security

  • Secret values are encrypted at rest with AES-256-GCM, never written to logs, and readable only by your own account (to edit them).
  • Grant the minimum scopes or permissions the operations you actually use require.
  • Rotate the credential periodically, and immediately if it may have been exposed.
  • Credentials are scoped to your account — a workflow cannot use another account's.

Frequently asked questions

Which BusyBot nodes use Twist credentials?

One node: Twist. Create the credential once and select it in that node.

What does a Twist credential need?

4 fields: Client ID, Client Secret, Access Token, Refresh Token. Required: Client ID, Client Secret, Access Token. The values come from your own Twist account.

How are Twist secrets stored?

Secret values are encrypted at rest with AES-256-GCM, never written to logs, and scoped to your account: only you can open the credential again to edit it, and a workflow in another account cannot use it.

Does Twist use OAuth?

Yes. This credential connects through OAuth (fields: Client ID, Client Secret, Access Token, Refresh Token): you approve access in Twist, and the resulting tokens are stored encrypted like every other credential.

Nodes that use Twist OAuth2 API

One credential works across every node below — create it once and reuse it.