Skip to content

Managing QuickFlo from a workflow

Most steps reach out to other systems. This small family of steps points the other way: it lets a workflow manage your own QuickFlo account — the connections, environment variables, logs, and run history you’d otherwise manage by hand in the app.

The step that started it all: rotating a password. If a service makes you change a credential every 90 days, you can build a workflow that does it on a schedule instead of you remembering to.

StepWhat it’s for
Update ConnectionChange an existing connection’s settings — for example, rotate its password on a schedule while leaving the username alone.
Create ConnectionAdd a new connection from a workflow.
List ConnectionsLook up your connections by name or type. Returns names and types only — never the stored credentials.
Set Environment VariableSet or update a value in one of your environments.
List Environment Variable KeysSee which variable names exist in an environment (names only, never the values).
Query LogsSearch your workflow and connection logs — handy for a workflow that watches for errors and alerts you.
Query ExecutionsLook up your run history by workflow, status, or time range.
  1. A Schedule trigger fires every 90 days.
  2. A step generates or fetches the new password.
  3. Update Connection points at the connection and sets just its password field. Everything else on the connection stays exactly as it was.

Because you only fill in the field you want to change, the rest of the connection is left untouched — you don’t have to know or re-enter the username.

Changing a credential or an environment variable from a workflow is exactly as powerful as changing it by hand in the app — so it needs the same permission. To save a workflow that creates or updates a connection or sets an environment variable, you need Secrets Admin access. QuickFlo checks this the moment you save the workflow, not later — so a teammate without that access simply can’t build one of these steps into a workflow in the first place.

The read-only steps (List Connections, Query Logs, Query Executions, List Variable Keys) follow the same idea with the matching view permission.

These steps are careful with sensitive values in both directions:

  • Nothing sensitive comes back out. Update and Create Connection return only the connection’s name, type, and id — never its config. List Connections returns names and types. List Variable Keys returns key names, never values. There is deliberately no step that reads a stored password or secret back out of a connection.
  • Secrets never land in your run logs. When you set a password or a variable value, that value is stripped out of the workflow’s saved run record. So even someone who can read a run’s details can’t recover the secret you set.