Keys Sent with Each Call
Part of the MountDev Ops Workspace documentation. Updated November 5, 2026
MountDev Ops Workspace documentation | Updated November 5, 2026
Our Commitment
MountDev Ops is built security first. Your business data belongs to you, and you can export all of it at any time. We never use analytics or tracking of any kind inside MountDev Ops.
Every update passes all 2,733 automated checks before it ships, plus screen tests on 9 screen sizes for everything it changes.
What Happens to Your Keys
When a call to the shared engine needs one of your keys, your workspace opens only that key from the connection you saved in Settings, Connections, puts it in that one call, and sends nothing else. The engine uses it for the call and keeps nothing. Your workspace never keeps a copy outside the connection it came from, never writes a key in a log, and never shows one on a screen or hands one to an AI agent or API key. An action that sends a call is for people only. The engine's answer and any error are cleaned of every key before they reach your screens.
If a call needs a connection you have not saved, it stops before anything is sent, and the message says what to connect. If a connection is missing a part, such as an organization name, the message says which part. The rules for every call are on the engine call contract page.
The Keys a Call Can Carry
Each key goes by a fixed name, and its value has a fixed shape.
| Name | Connection it comes from | Value |
|---|---|---|
telnyx | Telnyx | api_key, and when saved: public_key, connection_id, texml_app_id, messaging_profile_id, number |
cloudflare_dns | Cloudflare | token |
cloudflare_hosting | Cloudflare Hosting Storage | account_id, bucket, access_key_id, api_token, secret_access_key |
google_service_account | Google Search Console | client_email, private_key |
pagespeed_key, ahrefs, anthropic, wordfence, web_risk, blogvault, cliq_handler | The service of the same name | key |
rocket | Rocket.net | username, password |
aws_operator | Amazon Web Services | access_key_id, secret_access_key, region |
aws_hosting | AWS Hosting | account_id, access_key_id, secret_access_key, region |
planetscale | PlanetScale | organization, token_id, token |
google_oauth_client | Google Sign-In Client | client_id, client_secret |
mdo_workspace | Outside AI Assistant | base, key, secret, and the assistant's email |
stripe | Stripe | secret, and when saved: publishable, webhook_secret |
Sending a Call Planned
Calls begin to run once each account has its own engine token. Until then, a call stops with "This is not available yet." and nothing is sent.