Credential Vault
A credential vault centrally manages authentication information for external services. The vault stores specific credentials (API Keys, Tokens, etc.) that are bound when creating a session and referenced by MCP services and skills at runtime.
Structure
Credentials use a two-level structure:
Vault: A container for grouping and managing credentials.
Credential: A specific secret stored in the vault. Each credential contains a variable name and a variable value.
Create a Vault
On the Credentials page, click Create Secret.
Enter the vault name and click Create.
Add a Credential
After creating a vault, add specific credentials on the vault details page:
Click the vault name to enter the details page.
In the Credential List area, click Create Secret.
Fill in the following fields:
Name: The display name of the credential.
Key: The key name referenced by tools, for example
MY_API_KEY.Value: The actual secret content. After saving, the plaintext is no longer displayed on the frontend and is only decrypted and injected by the backend during tool calls.
Click Create to finish.
Bind to a Session
When creating a session, select an existing vault in the Credential Vault field. During session execution, MCP services and skills can reference credential values by variable name.