Integrations · TestRail
A Guild agent reads your TestRail projects, test runs, cases, and results using your instance credentials. Guild stores those credentials server-side and injects them into every request, so agent code never sees them. Credential policies let you restrict which operations each agent may call, and every request is logged for audit.
Book a demo
See how teams govern agents that use TestRail.
Start free
Connect TestRail and scope your first agent.
What the TestRail integration exposes
The integration provides read-only tools that cover projects, test suites, sections, cases, runs, tests, results, attachments, and users. Tools follow thetestrail_ prefix convention, so get_projects is called as testrail_get_projects. All operations are GET-style reads; the integration does not create or update any TestRail data. Each TestRail instance requires its own credential entry in Guild.
How it works
1
Open Credentials in Guild
Go to Credentials in Guild and click TestRail. Credentials are entered directly; no OAuth flow is required.
2
Enter your instance details
Provide your TestRail instance URL, your account email, and an API key from My Settings > API Keys in TestRail. API keys are long-lived and do not expire.
3
Spread tools into your agent
Import
testrailTools from @guildai-services/guildai~testrail and spread it into your agent’s tools object. Guild resolves and injects the credential server-side at runtime.Why TestRail access needs governing
TestRail holds your organisation’s full test history, case libraries, and QA coverage data. Guild stores the API key in its credential store and injects it through the credential proxy, so the key never appears in agent code, prompts, or container state. You can scope a credential to a single workspace, a single member, or a single agent, so each agent resolves exactly the credential you intend. On top of scoping, credential policies let you write ALLOW and DENY rules that the proxy enforces before any request leaves Guild. A DENY rule always wins over an ALLOW rule, and a request that no rule allows is denied by default once you remove the auto-created allow-all policy. Because the TestRail integration is read-only by design, policies here are about limiting which projects or runs a given agent can see, not about blocking writes that do not exist.About the TestRail integration
The@guildai-services/guildai~testrail package provides agents with read-only access to the TestRail API for test management data.
Authentication
- Type: Basic auth (email + API key)
- Token expiration: None — API keys are long-lived
- Instance URL: Each TestRail instance has its own base URL
Setup
1
Open Credentials
Go to Credentials in Guild.
2
Connect TestRail
Click TestRail and enter your credentials.
3
Enter Base URL
Your TestRail instance URL (e.g.,
https://company.testrail.io).4
Enter Email
Your TestRail account email.
5
Enter API Key
Found in TestRail under My Settings > API Keys.
Usage
testrail_ prefix — for example, get_projects becomes testrail_get_projects.
Tools
Tools in the latest published version ofguildai~testrail:
Webhook events
TestRail does not support webhook triggers in Guild. This integration is API-access only.Limitations
- Read-only API operations — no creating or updating test cases, runs, or results
- No webhook or trigger support
- Each TestRail instance requires its own credential entry
Frequently asked questions
Can a Guild agent create or update test cases and runs in TestRail?
Can a Guild agent create or update test cases and runs in TestRail?
No. The integration exposes read-only operations only. No tools exist for creating or updating test cases, runs, or results.
Does TestRail trigger Guild agents automatically when a run finishes?
Does TestRail trigger Guild agents automatically when a run finishes?
Not yet. TestRail does not support webhook triggers in Guild. The integration is API-access only, so agents must be invoked directly rather than in response to TestRail events.
How does Guild keep my TestRail API key secure?
How does Guild keep my TestRail API key secure?
Guild stores the key server-side and adds it to requests through its credential proxy. The key never enters agent code, the agent container, or the model prompt. You can read more about this on the credentials page.
Can I connect separate TestRail credentials for different workspaces?
Can I connect separate TestRail credentials for different workspaces?
Yes. Each TestRail instance requires its own credential entry, and Guild lets you scope a credential to a single workspace so agents in other workspaces use a different one. See Service credentials for scoping options.
Put a governed agent on TestRail this week
Book a demo
See how teams govern agents that use TestRail.
Start free
Connect TestRail and scope your first agent.