Credentials

Credentials identify applications and environments for machine-to-machine calls. Store secrets outside source control and rotate them with a grace window when callers need time.

Create

Issue per environment

Create credentials from an application or the API credentials page, then bind them to the correct application environment.

Store

Copy once

The plaintext secret is only shown at creation or regeneration. Put it into a secret manager before closing the page.

Rotate

Regenerate and revoke

Regenerate when a secret is exposed or needs planned replacement. Revoke the old secret after callers have deployed the new value.