What each connector needs

Gather these before you start. Every one of them is scoped and revocable on its own, and none of them is your main account password.

Whatever you paste in, nothing is stored in plaintext — including in our logs. The security model sets out the envelope encryption, the per-workspace keys and what we explicitly do not claim.

cPanel

Asks for: host, port, username and an API token. Optionally SFTP and database credentials if the account separates them.

Use a scoped API token, never your account password and never a WHM login. You can revoke a token without changing anything else.

DirectAdmin

Asks for: host, port, username and a Login Key. Optionally SFTP and database credentials.

A Login Key is the DirectAdmin equivalent of a scoped token: revocable on its own, under User Level Config, Login Keys.

WordPress

Asks for: SFTP host, port, username and password, the site root path, and the database host, port, name, user and password.

The database values are the ones already in your wp-config.php. Copy them from there rather than guessing.

MySQL or PostgreSQL

Asks for: host, port, database name, username and password.

A read-only user is enough to take a backup. Grant no more than that.

Files over SFTP

Asks for: host, port, username, and a key or password, plus the path to back up.

Good for a file tree that is not a whole hosting account, such as a static site or an uploads directory.

Standalone agent

Asks for: one install command on the server, which enrols it against your workspace.

The agent writes backups and cannot decrypt one. A stolen agent leaks nothing, which is why it suits servers you do not fully control.

Source types

Every source is recorded against a type. These are the values the application uses, and the ones you will see if you drive sources through the API:

cpanel
directadmin
wordpress
db
postgresql
files
push
manual

The OpenAPI description is authoritative for which identifier a given connector uses and for the exact fields it accepts. The API and AI agents guide covers the auth model and worked examples.

None of these is your main account password. Where the connector offers a narrower credential — a cPanel API token, a DirectAdmin Login Key, an SFTP key, a read-only database user — use it. That is what lets you withdraw access later without changing anything else you run.

Once it is connected

Go back to the quick start for the schedule, retention and first verified run, then restore it somewhere harmless before you need to.