What you manage in the Control Room
- API credentials (
client_id,signing_secret, API token) - Flow branding (
flow_config, logo, privacy policy) - Webhook destinations and event subscriptions
- Team/admin access
Authentication context
Actions in The Control Room map to API-authenticated operations:- Link API base:
https://link.emergedata.ai - Query API base:
https://query.emergedata.ai - Auth header:
Authorization: Bearer <api_token>
Response example: flow configs
GET /configs response:
API parity examples
Gotchas
- Treat The Control Room credentials as production secrets. Never embed them in frontend code.
- Rotate credentials after team changes.
- Keep redirect URIs and webhook URLs environment-specific to avoid data leaks.