Template Syntax

Inject dynamic values into configurations.

Template Format

Templates use double curly braces: {{source.field}}

Sources

Environment Variables

"{{env.VARIABLE_NAME}}"

Example:

{
  "jwt": {
    "secret": "{{env.JWT_SECRET}}"
  }
}

Legacy syntax (also supported):

"${VARIABLE_NAME}"

Request Body

"{{body.fieldName}}"

Example:

{
  "data": {
    "title": "{{body.title}}",
    "content": "{{body.content}}"
  }
}

Nested fields:

"{{body.user.name}}"
"{{body.items[0].id}}"

URL Parameters

"{{params.paramName}}"

For route /users/:id:

{
  "filters": [{
    "column": "id",
    "operator": "eq",
    "value": "{{params.id}}"
  }]
}

Query Parameters

"{{query.paramName}}"

For /search?q=term&limit=10:

{
  "filters": [{
    "column": "name",
    "operator": "ilike",
    "value": "%{{query.q}}%"
  }],
  "limit": "{{query.limit}}"
}

JWT Claims

"{{auth.claimName}}"

Available claims:

• {{auth.sub}} - Subject (user ID)
• {{auth.role}} - User role
• {{auth.tenant_id}} - Tenant ID
• {{auth.email}} - Email (if included)

Example:

{
  "data": {
    "user_id": "{{auth.sub}}",
    "created_by": "{{auth.sub}}"
  }
}

Tenant Context

"{{tenant.id}}"
"{{tenant.config.field}}"

Secrets

Reference tenant-specific secrets stored securely in the database.

"{{secret:API_KEY}}"
"{{secret:STRIPE_SECRET}}"

Legacy syntax (also supported):

"{{secret.SECRET_KEY}}"

Setting Secrets

POST /tenant/secrets
Authorization: Bearer <token>

{
  "key": "STRIPE_SECRET",
  "value": "sk_live_...",
  "metadata": { "description": "Stripe API key" }
}

Using in Config

{
  "credentials": {
    "stripe": {
      "secretKey": "{{secret:STRIPE_SECRET}}"
    }
  }
}

Secret Rotation

POST /tenant/secrets/rotate
Authorization: Bearer <token>

{
  "key": "API_KEY",
  "newValue": "new-secret-value",
  "gracePeriodDays": 30
}

Old secret remains valid during grace period.

Secret Expiration

{
  "key": "TEMP_TOKEN",
  "value": "temporary-value",
  "expiresAt": "2024-12-31T23:59:59Z"
}

Expired secrets return null when accessed.

Step Results (Workflows)

"{{steps.stepId.result}}"
"{{steps.stepId.result.field}}"

Input (Workflows)

"{{input.fieldName}}"

String Concatenation

Templates can be embedded in strings:

{
  "select": "*, users(name)",
  "filters": [{
    "column": "name",
    "operator": "ilike",
    "value": "%{{query.search}}%"
  }]
}

Default Values

Use JavaScript OR syntax:

"{{query.limit || 10}}"

Examples

Full Route Example

{
  "path": "/posts/:id",
  "method": "put",
  "requireAuth": true,
  "supabaseQueries": [{
    "table": "posts",
    "operation": "update",
    "data": {
      "title": "{{body.title}}",
      "content": "{{body.content}}",
      "updated_by": "{{auth.sub}}",
      "updated_at": "now()"
    },
    "filters": [
      { "column": "id", "operator": "eq", "value": "{{params.id}}" },
      { "column": "user_id", "operator": "eq", "value": "{{auth.sub}}" }
    ],
    "select": "*",
    "single": true
  }]
}

Integration Example

{
  "integrations": [{
    "type": "slack",
    "action": "sendMessage",
    "params": {
      "channel": "{{env.SLACK_CHANNEL}}",
      "text": "New order from {{body.customer_name}}"
    }
  }]
}

Template Reference

Template	Source	Example
{{env.VAR}}	Environment	{{env.API_KEY}}
{{body.field}}	Request body	{{body.name}}
{{params.param}}	URL param	{{params.id}}
{{query.param}}	Query string	{{query.search}}
{{auth.claim}}	JWT claim	{{auth.sub}}
{{tenant.id}}	Tenant ID	{{tenant.id}}
{{secret.key}}	Tenant secret	{{secret.API_KEY}}
{{steps.id.result}}	Workflow step	{{steps.fetch.result}}
{{input.field}}	Workflow input	{{input.ticketId}}