Credentials API
Credentials are managed from Studio or through the API with the session of a Client administrator.
Credential object
| Field | Description |
|---|---|
id | Identifier. |
provider | infernode, anthropic, gemini, openrouter, saptiva, s3, whatsapp, mcp. |
name | Display name; it is what agents and workflows reference. |
isDefault | Whether it is the default for its provider. |
sharedWithOrg | Whether the whole organization can use it. |
managedBy | user, organization or system. infernode credentials belong to the organization. |
updatedAt | Last modification. |
Secret values are never returned in reads.
Operations
- List the Client's credentials with their status (
connected,unconfigured). - Create: provider, name and the provider's fields (for example, for S3: endpoint, region, key, secret, bucket and optional public URL). The service validates against the provider before saving.
- Edit: empty secret fields keep the current value. This is how you rotate without changing references.
- Share with the organization and stop sharing.
- Mark as default.
- Delete. Irreversible; the agents and workflows that used it move to
needs_attention.
Errors
| HTTP | When |
|---|---|
| 403 | The user is not a Client administrator. |
| 422 | The provider rejected the credentials. |
| 503 | The secret store is not available. |
Exact paths in your installation's OpenAPI.