Credentials
Credentials identify applications and environments for machine-to-machine calls. Store secrets outside source control and rotate them with a grace window when callers need time.
Create
Issue per environment
Create credentials from an application or the API credentials page, then bind them to the correct application environment.
Store
Copy once
The plaintext secret is only shown at creation or regeneration. Put it into a secret manager before closing the page.
Rotate
Regenerate and revoke
Regenerate when a secret is exposed or needs planned replacement. Revoke the old secret after callers have deployed the new value.