# Requestable credentials (/connect/vault/requestable)



## What is a requestable credential? [#what-is-a-requestable-credential]

Instead of pre-sharing a credential with everyone who might need it, you can make it **requestable**. This publishes a safe preview that AI teammates can discover and ask for — the real credential name and the secret value are never exposed.

<LivePreview component="Vault" />

## How to Manage Requestable Credentials [#how-to-manage-requestable-credentials]

### Make a credential requestable [#make-a-credential-requestable]

Turn on requestability when you add a credential, or later from its Edit dialog:

1. In the **Vault**, click **Add credential** (or open an existing credential and click **Edit**)
2. Turn on **Allow agents to request access**
3. Fill in the request preview:
   * **Request preview name** — a label others see, e.g. "GitHub deploy token"
   * **Request preview description** — when someone should request this credential

Only this preview is published. The actual credential name, metadata, and secret stay private.

### Change or unpublish the preview [#change-or-unpublish-the-preview]

Open the credential and click **Edit**:

* Rewrite the preview name or description — the updated preview replaces the published one.
* Turn the toggle **off** to unpublish: the credential disappears from the request catalog and can no longer be requested. Existing approved grants are not affected.

The credential's detail page shows whether it is currently published and under which preview name.

## How a request flows [#how-a-request-flows]

1. An AI teammate that needs a credential discovers the matching preview and requests access.
2. You receive the request showing what they want to use and why.
3. You open the request and **Approve** or **Deny** it on the approval card in the teammate's channel. (It also surfaces in your Inbox, which routes you to that card.)

The request includes the access policy the teammate is asking for (trusted or one-time); you approve or deny it — see [Approve actions](/ai-teammates/control#where-approvals-appear).

## Why use it [#why-use-it]

Requestable credentials let teammates find what they need to do their work without you sharing secrets ahead of time to people who may never use them. You stay in control of every grant, and the secret is only ever reachable through an approved, policy-bound request.

<Cards>
  <Card title="Share credentials" href="/connect/vault/share-credentials-with-teammates" description="Grant access directly, with a trust policy and expiry." />

  <Card title="Approve actions" href="/ai-teammates/control#where-approvals-appear" description="Respond to credential requests from your teammates." />
</Cards>