Skip to main content
The project Connections area contains nonsecret references to external resources and restricted checker credentials for named CI reports. A connection is a reference for people and tools; Kiwi does not call the referenced URL.

​
External references

A project Admin can add a name, HTTPS endpoint URL, notes, and bindings to exact published workflow revisions and step IDs. The endpoint must be a public HTTPS URL. Kiwi rejects URL credentials, query strings, fragments, local or private addresses, and non-HTTPS schemes. Do not put a token, password, or signed query parameter in the reference. Connections and bindings are metadata for people and agent environments. Kiwi does not fetch or call the URL, test its health, store its remote secret, or treat the presence of a reference as workflow evidence. The list omits secrets. Archived references remain part of the configuration history. To change a reference, open the project’s Connections area and edit its fields and bindings. Archive it by setting its status to archived; archived references remain configuration history. Bindings identify a workflow_id, positive workflow_revision, and step_id, and do not rewrite a run’s pinned definition.

​
Checker credentials

Use a checker credential when a CI pipeline needs to submit a named required check. A project Admin creates a credential with selected check IDs and an expiry. The check must also be defined in the accepted Plan, permit checker_reported, and list the credential’s nonsecret reporterId in authorizedReporterIds. Save the key secret directly in the CI secret store when it is shown. Later inventory and issuance replay return metadata only. The credential metadata id identifies the Kiwi record; reporterId identifies the reporter used in a Plan assignment. Do not substitute one for the other, and never place the secret in a workflow definition, repository, log, or issue. Checker credentials authorize only check reporting for the bound project and allowed check IDs. They cannot read runs through MCP, make human decisions, or submit ordinary step outputs. Revoke credentials when no longer needed. If Kiwi shows that revocation is pending, use the available retry action in the app and check its status there. For a copyable context-read and report sequence, see CI reporting.

​
Project logs

Use Logs to inspect committed workflow events across the project’s runs. Filter by run or event type, inspect the actor and event, and open the associated run. The log records workflow transitions and submitted evidence; it is not a complete error log and does not include unreported agent or CI activity.