A credential vault is a secure repository for centrally managing authentication information for external services. Specific credentials (e.g., API keys, tokens) are stored inside the vault and bound to sessions at creation time, enabling MCP services and skills to reference them at runtime.
Structure
Credentials follow a two-level hierarchy:
- Vault: A container for grouping and managing credentials.
- Credential: A specific secret stored within a vault, consisting of a variable name and its corresponding value.
Creating a Vault
- On the Credentials page, click Create Vault.
- Enter a vault name and click Create.
Adding Credentials
After creating a vault, add individual credentials on the vault’s detail page:
- Click the vault name to navigate to its detail page.
- In the Credential List section, click New Credential.
- Fill in the following fields:
- Credential Name: A display name for the credential.
- Variable Name: The key used by tools to reference this credential (e.g.,
MY_API_KEY). - Variable Value: The actual secret value. After saving, the plaintext value is no longer displayed in the UI; it is decrypted and injected server-side only when referenced by tools.
- Click Create to complete.
Binding to a Session
When creating a session, select an existing vault from the Credential Vault dropdown field. During session execution, MCP services and skills can reference credential values using their variable names.
Next Steps
- Initiate a Session: Bind a vault when creating a session.
- Define an Agent: Attach MCP services or skills requiring authentication to your agent.