Settings
API keys, integrations, and security
Profile
D
Dubai Broker
Loading...
Team
Loading…
Anthropic API Key
Not ConnectedYour API key is stored securely server-side and never exposed to the browser.
Database
PostgreSQLYour data is stored in a secure PostgreSQL database with encryption at rest. No more Google Sheets dependency.
StatusActive
ProviderSupabase (PostgreSQL)
WhatsApp Integration
Direct ModeDirect WhatsApp (Always Active)
Click "Send" on any contact to open your personal WhatsApp with a pre-filled message. No setup needed.
ActiveWhatsApp Business API (Optional)
For automated campaigns and receiving messages. Add these env vars in Vercel:
WHATSAPP_ACCESS_TOKEN— Meta Business access tokenWHATSAPP_PHONE_NUMBER_ID— Your WA phone number IDWHATSAPP_WEBHOOK_VERIFY_TOKEN— Webhook verification token
Lead Capture Form
ActiveShare a public form URL that automatically creates contacts in your CRM with source attribution.
/capture?source=instagram
Two-Factor Authentication
DisabledAdd an extra layer of security. Protect your client data with time-based one-time codes.
Security
Hardened- ✓ CSP Headers enabled
- ✓ API rate limiting (per-route sliding window)
- ✓ Input validation (Zod schemas)
- ✓ XSS protection (DOMPurify)
- ✓ Server-side API key storage
- ✓ NextAuth.js authentication
- ✓ HTTPS + HSTS enforced
- ✓ Lead deduplication (phone + email)
- ✓ Full audit log (contact edits, creates, deletes)
- ○ Two-factor authentication (TOTP)