Integrations Overview

Four external services power your raffle site. All four are configured at /admin/integrations by pasting the keys you get from each provider. Encryption + service-role access happens in the Worker; never touch the browser.

Cashflows: card payments

• What it does: takes card payments, Apple Pay, Google Pay via their embedded checkout SDK.
• What you paste: MID (merchant ID), API key, webhook secret. Mode toggle: test for sandbox / live for prod.
• Full setup: Applying for Your Cashflows MID.

Resend: transactional email

• What it does: sends order confirmations, winner notifications, marketing emails. Verified domain so emails land in inboxes not spam.
• What you paste: API key, From email (e.g. news@yoursite.co.uk), From name (e.g. Acme Raffles), webhook secret (svix-signed).
• See: Setting Up Your Sending Email Inbox.

Twilio: SMS

• What it does: bulk SMS campaigns, winner SMS alerts, phone verification at signup.
• What you paste: Account SID, Auth Token, sender phone (E.164 format, e.g. +447426994163).
• Sign up at twilio.com. UK long codes are typically ~£0.04 per SMS, and we add no markup.

Turnstile: anti-bot

• What it does: invisible captcha on signup, login, contact forms. Stops scraper bots and fake account farms.
• What you paste: site key (public) and secret key (server-side). Created free at dash.cloudflare.com → Turnstile.
• Use the Invisible widget type, which runs silently and only challenges suspicious sessions.

Where these credentials live

Encrypted in your tenant’s tenant_integrations row. Never sent to the browser. Read at request time by the Worker using service-role auth. Rotation: paste a new key and click Save; old key invalidated immediately.

Next: Setting Up Your Sending Email Inbox.