What's new in Prowork
September 3, 2026
Private key authentication for NetSuite and other token APIs
New
The Expiring Access Token (Client Credentials) credential has an Authentication method setting, and picking Private key JWT lets you authenticate with a signed key instead of a shared secret. NetSuite’s other flow forces a reconnect every seven days no matter what; this one doesn’t expire. Simple setup takes a token URL, client ID, key file, signing algorithm, key ID and scopes, and an advanced section covers servers that want something non-standard. The key is uploaded from a file and never sent back to the browser, so editing a credential means uploading it again.