What's new in Prowork

September 3, 2026

Private key authentication for NetSuite and other token APIs

New

The Expiring Access Token (Client Credentials) credential has an Authentication method setting, and picking Private key JWT lets you authenticate with a signed key instead of a shared secret. NetSuite’s other flow forces a reconnect every seven days no matter what; this one doesn’t expire. Simple setup takes a token URL, client ID, key file, signing algorithm, key ID and scopes, and an advanced section covers servers that want something non-standard. The key is uploaded from a file and never sent back to the browser, so editing a credential means uploading it again.