Credentials
The workspace's vault for the API keys, tokens and passwords its connections use: how to add one, replace its secret, and delete it.
A credential is a key, a token or a login that a connected API asks for. Sterodata keeps them in one place per workspace, under Settings, Credentials, so a connection refers to a credential by its name and nobody pastes the secret twice. Only workspace admins see this tab.
How the secret is kept
- The secret is stored encrypted in a secret store, apart from your tables.
- It is never shown again after you save it: not in the app, and not through Sterodata's API. You can replace it, not read it.
- Sterodata sends it only to the API whose connection uses it.
Add a credential
- Open Settings and choose the Credentials tab, then Add credential.
- Give it a Name your team will recognise, such as
invoicing-api-key. - Choose its Kind, and add a Description (optional).
- Fill in the secret's fields for that kind, then choose Save.
You can also save one while connecting an API: + Save new credential… in the wizard saves a bearer token. For an API key or a username and password, add the credential here first.
| Kind | What you enter | How a connection uses it |
|---|---|---|
| Bearer token | token | Sent in the Authorization header. |
| API key | header_name (for example X-API-Key) and value | Sent in the header you named. |
| Basic auth | username and password | Put into a request where an automation's step places them, as SOAP services that take a login in each request expect. |
The Kind list also offers Body-injected auth, OAuth2 (refresh token), Webhook HMAC secret, Slack incoming webhook and Generic. You can save them, but no connection or automation in the app uses them: connecting an API offers only bearer tokens, API keys and basic auth.
Replace a secret
- Open the credential under Credentials.
- Tick Rotate secret (Replace the stored secret with new values) and enter the new values.
- Choose Save. Every connection that uses the credential sends the new secret from its next request.
On the same page you can change the name and the description. The kind cannot be changed once the credential is saved: add a new credential instead.
Delete a credential
Use the menu beside its name in the side list, choose Delete and confirm. Its secret is removed from the store. The same menu has Rename.
Sterodata does not stop you deleting a credential that a connection still uses. That connection stops signing in until you give it another credential, on its General tab under Credential.
Last updated 29 October 2026