BotchiDocs
Dashboard

Manage credentials and secrets

Create reusable credential profiles and bind the right identity to each tool group or workflow step.

On this page
View as Markdown

Before you begin

You need owner or dashboard editor access. A credential profile is a named set of keys for one connector, such as Shopify – store B. Profiles belong to the workspace and can serve several agents or workflows.

Create a profile

  1. Open Tools and select the connector.
  2. Select Profile.
  3. Choose New profile.
  4. Enter a Profile name that identifies the service account or access level.
  5. Enter the required keys, tokens, client credentials or passwords.
  6. Choose Create profile.

You can also create a profile from an agent's tool panel. Next, bind the profile to the agent's connector, or select it for a workflow tool step. Use different profiles when identities or provider permissions differ.

Replace a credential

  1. Open the profile on the connector page.
  2. Enter the replacement value for each key you are changing.
  3. Choose Save changes.

Leaving an existing value empty preserves it. Changing a shared profile changes the credentials used by every binding to that profile.

Rule — Stored values are encrypted at rest. Editors and the Assistant never receive them. Only the owner can explicitly reveal a stored value in the browser.

During execution, Botchi reads the bound profile and injects the secret into the request. The model works with key names and tool arguments, not saved credential values. Ordinary listings show masked metadata, including the last four characters.

Retire a profile

  1. Review the agents and workflows using the profile.
  2. Rebind them to a replacement profile.
  3. Disconnect WhatsApp numbers if you are retiring the profile that routes their webhooks.
  4. Remove the unused profile.

Botchi refuses removal while an agent, workflow or live WhatsApp webhook still depends on the profile. Removing it deletes its stored values.

There is no shared secrets vault. Credentials belong to a profile or a connected account. WhatsApp stores the Meta app secret once per workspace in its connector profile.

Related