Skip to main content
Integrations · TestRail
A Guild agent reads your TestRail projects, test runs, cases, and results using your instance credentials. Guild stores those credentials server-side and injects them into every request, so agent code never sees them. Credential policies let you restrict which operations each agent may call, and every request is logged for audit.

Book a demo

See how teams govern agents that use TestRail.

Start free

Connect TestRail and scope your first agent.

What the TestRail integration exposes

The integration provides read-only tools that cover projects, test suites, sections, cases, runs, tests, results, attachments, and users. Tools follow the testrail_ prefix convention, so get_projects is called as testrail_get_projects. All operations are GET-style reads; the integration does not create or update any TestRail data. Each TestRail instance requires its own credential entry in Guild.

How it works

1

Open Credentials in Guild

Go to Credentials in Guild and click TestRail. Credentials are entered directly; no OAuth flow is required.
2

Enter your instance details

Provide your TestRail instance URL, your account email, and an API key from My Settings > API Keys in TestRail. API keys are long-lived and do not expire.
3

Spread tools into your agent

Import testrailTools from @guildai-services/guildai~testrail and spread it into your agent’s tools object. Guild resolves and injects the credential server-side at runtime.

Why TestRail access needs governing

TestRail holds your organisation’s full test history, case libraries, and QA coverage data. Guild stores the API key in its credential store and injects it through the credential proxy, so the key never appears in agent code, prompts, or container state. You can scope a credential to a single workspace, a single member, or a single agent, so each agent resolves exactly the credential you intend. On top of scoping, credential policies let you write ALLOW and DENY rules that the proxy enforces before any request leaves Guild. A DENY rule always wins over an ALLOW rule, and a request that no rule allows is denied by default once you remove the auto-created allow-all policy. Because the TestRail integration is read-only by design, policies here are about limiting which projects or runs a given agent can see, not about blocking writes that do not exist.

About the TestRail integration

The @guildai-services/guildai~testrail package provides agents with read-only access to the TestRail API for test management data.

Authentication

  • Type: Basic auth (email + API key)
  • Token expiration: None — API keys are long-lived
  • Instance URL: Each TestRail instance has its own base URL

Setup

1

Open Credentials

Go to Credentials in Guild.
2

Connect TestRail

Click TestRail and enter your credentials.
3

Enter Base URL

Your TestRail instance URL (e.g., https://company.testrail.io).
4

Enter Email

Your TestRail account email.
5

Enter API Key

Found in TestRail under My Settings > API Keys.
No OAuth flow is required — credentials are entered directly.

Usage

Tools are named with the testrail_ prefix — for example, get_projects becomes testrail_get_projects.

Tools

Tools in the latest published version of guildai~testrail:

Webhook events

TestRail does not support webhook triggers in Guild. This integration is API-access only.

Limitations

  • Read-only API operations — no creating or updating test cases, runs, or results
  • No webhook or trigger support
  • Each TestRail instance requires its own credential entry

Frequently asked questions

No. The integration exposes read-only operations only. No tools exist for creating or updating test cases, runs, or results.
Not yet. TestRail does not support webhook triggers in Guild. The integration is API-access only, so agents must be invoked directly rather than in response to TestRail events.
Guild stores the key server-side and adds it to requests through its credential proxy. The key never enters agent code, the agent container, or the model prompt. You can read more about this on the credentials page.
Yes. Each TestRail instance requires its own credential entry, and Guild lets you scope a credential to a single workspace so agents in other workspaces use a different one. See Service credentials for scoping options.

Put a governed agent on TestRail this week

Book a demo

See how teams govern agents that use TestRail.

Start free

Connect TestRail and scope your first agent.
Also runs on Guild: Cypress Read: Docs: Credential policies · Credentials · Tools in agents
Last modified on October 16, 2026