Credentials

Under Integrations → Credentials, the page heading is Connector Credentials. Credentials are encrypted at rest and referenced by connectors by name — never inline. They are write-only: the plaintext value is never shown again after saving:

Info

Enterprise licence required. Integrations is gated on an active enterprise licence. Without one the section does not appear in the admin sidebar, regardless of the signed-in user’s role.

Connector Credentials

Name, Organization, Kind, a masked Value, Version, Status, and when it was last updated. You can manage credentials for any organization you administer.

Info

Secrets are write-only — enter a value when creating or rotating a credential; it cannot be retrieved afterwards.

Empty list — No connector credentials yet / Add a credential to store an API key that outbound connectors can reference. CTA: Add credential.

Click Add credential to store a new one:

Add connector credential

Organization, Kind, a unique Name (e.g. stripe-production), and the Secret value. Copy the value elsewhere first — it cannot be retrieved after saving.

Table columns — Name, Organization, Kind, Value, Version, Status, Updated, Actions. Kind shows API key. Status is Active, Rotated, or Revoked.

Click the eye icon on an existing credential to see its details — reference ID, masked value, active version, status, and full version history — plus a Rotate credential action to add a new version without changing the name connectors reference:

Connector credential details

Every field here is masked or metadata only — rotating creates a new version while the connector keeps referencing the same credential name.

Check Show revoked to include credentials that have been rotated out or revoked in the list.

• Connectors — the Credential dropdown in a connector’s Authentication section references these by name.
• Connector Execution.
• Allowlist — the host a credential’s connector is allowed to call.