Skip to main content
The runtime passes saved installation values to main(config). Always supply a default or handle a missing value so the app can render before setup is complete.

Define a schema

Use get_schema() to describe the fields shown by Niblet clients:
Supported field families include text, toggle, dropdown, color, date and time, location, typeahead, generated options, exact-size photo selection, credential, and OAuth-backed connections. Availability can depend on the client and hosted provider configuration.

Treat sensitive values differently

Never add passwords or API tokens to ordinary source or defaults. Credential fields are stored separately and are not returned through MCP. Provider OAuth is configured by Niblet Cloud and exposed to apps only at render time.
Do not log configuration objects. Even when a field is not secret, it may hold location or user-provided content that does not belong in logs or review notes.