Before you start
- A Freshdesk account and your support domain.
Step-by-step
- 1
Find your API key
In Freshdesk → Profile settings, copy your API key (use a dedicated agent where possible).
- 2
Connect
Integrations → Freshdesk → Connect and provide your domain and API key.
Security best practices
- Your domain is validated as a Freshdesk subdomain label to prevent request forgery.
- Use a limited-permission agent and rotate the key periodically.
- Credentials are encrypted at rest with AES-256-GCM — they are never stored in plain text.
- Only organization owners and admins can create or modify a connection.
- Prefer OAuth where available: it issues short-lived, scoped, revocable tokens instead of long-lived secrets.
- When you must use a token, create a fine-grained, least-privilege token and rotate it periodically.