Requestable credentials
Publish a safe preview of a credential so AI teammates can discover and request access — without exposing the secret or its real name.
What is a requestable credential?
Instead of pre-sharing a credential with everyone who might need it, you can make it requestable. This publishes a safe preview that AI teammates can discover and ask for — the real credential name and the secret value are never exposed.
How to Manage Requestable Credentials
Make a credential requestable
Turn on requestability when you add a credential, or later from its Edit dialog:
- In the Vault, click Add credential (or open an existing credential and click Edit)
- Turn on Allow agents to request access
- Fill in the request preview:
- Request preview name — a label others see, e.g. "GitHub deploy token"
- Request preview description — when someone should request this credential
Only this preview is published. The actual credential name, metadata, and secret stay private.
Change or unpublish the preview
Open the credential and click Edit:
- Rewrite the preview name or description — the updated preview replaces the published one.
- Turn the toggle off to unpublish: the credential disappears from the request catalog and can no longer be requested. Existing approved grants are not affected.
The credential's detail page shows whether it is currently published and under which preview name.
How a request flows
- An AI teammate that needs a credential discovers the matching preview and requests access.
- You receive the request showing what they want to use and why.
- You open the request and Approve or Deny it on the approval card in the teammate's channel. (It also surfaces in your Inbox, which routes you to that card.)
The request includes the access policy the teammate is asking for (trusted or one-time); you approve or deny it — see Approve actions.
Why use it
Requestable credentials let teammates find what they need to do their work without you sharing secrets ahead of time to people who may never use them. You stay in control of every grant, and the secret is only ever reachable through an approved, policy-bound request.