Skip to main content
Store shared API credentials in the encrypted credential store and reference them from data connectors or MCP connections. Customer-owned access tokens must be supplied through the connector’s verified-customer flow and are never saved as test input. Do not paste credentials into prompts, procedure steps, YAML, ordinary headers, test fixtures, or screenshots. Client keys (cpk_test_…, cpk_live_…) and secret server keys (ca_live_…) are managed under Deploy > API keys.