Clerk
Identity Secret keyManage users, organizations, sessions and invitations in Clerk from any Windmill script, flow or app.
Set up in 3 steps
Copy your secret key
In the Clerk dashboard, open API Keys and reveal the secret key for the instance you want — development and production have different ones.
Add the resource in Windmill
Open Resources, add a resource of type clerk, and paste the key.
Run your first script
Fork any script below and read before writing anything. There are hundreds here, so search by the verb you need.
Scripts
Building blocks, if none of the projects above fit. Fork one, run it, or call it as a step inside your own flow.
Verify the proxy configuration for your domain
Verify the password of a user
Verify a session
Verify a client
Verify a TOTP or backup code for a user
Upload a logo for the organization
Update production instance domain
Update instance settings
Update instance restrictions
Update instance organization settings
Update an organization membership
Update an organization domain.
Update an organization
Update an email address
Update an OAuth application
Update a user
Update a template for a given type and slug
Update a sign-up
Update a phone number
Update a domain
Update a SAML Connection
Update a JWT template
Unlock a user
Unban a user
Toggle the delivery by Clerk for a template of a given type and slug
Set user profile image
Rotate the client secret of the given OAuth application
Revokes an invitation
Revoke the given sign-in token
Revoke actor token
Resource type
clerk — the shape of the credential every script on this page expects.
| Field | Type | Required | What it is |
|---|---|---|---|
| apiKey | string | Yes | Secret Key found in configure tab of the instance. |
Questions
Secret key or publishable key?
The secret key. The publishable one is for the browser and cannot reach this API.
Development or production?
The key decides, and the two instances hold different users. Keep a resource for each and switch the one a flow points at.
Is my key stored on the hub?
Never. It lives only in your own Windmill workspace, encrypted at rest.