I am traying to do the code scanning. In normal code development work flow we do the code scanning for vulnerability or exposed API keys. Is it possible in the airtable
Question
Is it possible to scan all the automation script, in airtable for security?
Airtable does not have a built-in code scanning feature for automation scripts, unfortunately. But there are a few practical workarounds:
1. Use the Airtable Metadata API to list your automations and export script content where possible. Once exported, you can run them through standard static analysis tools (like ESLint with security plugins or Semgrep) to flag hardcoded API keys or credentials.
2. Manual audit: For smaller bases, open each automation Run a Script action and review the code. Look for hardcoded tokens, API keys, or URLs pointing to external services.
3. Store secrets in input variables: As a best practice, always pass sensitive values (API keys, tokens) as input variables to your scripts rather than hardcoding them. This way the keys live in the automation config rather than in the code itself.
4. Third-party tools: Some Airtable management platforms can help you inventory and review automations across bases.
It is a gap in Airtable tooling for sure, but these steps can get you closer to a proper security review.
+31I think your only option is to manually go through everything I’m afraid
+28Yup, as mendioned above you can only access scripts (same for automations actually) manually via Airtable’s interface.
You might want to request this a Product Idea using this form. Whilst you are at it, you might also want to include getting actual dependencies base<>scripts. Currently if I delete a field on my base which is referenced on a script Airtable will not warn us :(
Completely different matter, but would love to have you join the March 2026 AT Community led Hackathon! Make sure to sign up!!
Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.