Credentials
Securely store API keys and secrets for your integrations.
Overview
Credentials store sensitive information like API keys, tokens, and passwords. They're encrypted at rest and accessed only when needed by your flows and integrations.
Managing Credentials
Via Lux Studio
- Navigate to Settings → Credentials
- Click Add Credential
- Select credential type
- Enter name and value
- Save
Via CLI
# Set a secret
lux secrets set OPENAI_API_KEY sk-abc123...
# List secrets
lux secrets list
# Get a secret
lux secrets get OPENAI_API_KEY
# Delete a secret
lux secrets delete OPENAI_API_KEYCredential Types
API Keys
Simple key-value credentials for API authentication:
- Resend API Key - Email sending
- Twilio Credentials - SMS and voice
- ElevenLabs API Key - Voice synthesis
- OpenAI API Key - GPT models
- Anthropic API Key - Claude models
OAuth Tokens
For services requiring OAuth:
- Gmail - Send emails from Gmail account
- Slack - Post to Slack channels
- GitHub - Repository access
Custom Credentials
Store any secret your integrations need:
lux secrets set MY_CUSTOM_API_KEY my-secret-valueUsing Credentials
In Flows
Reference credentials in flow nodes:
{
"headers": {
"Authorization": "Bearer {{secrets.OPENAI_API_KEY}}"
}
}In Custom Tools
{
"headers": {
"X-API-Key": "{{credentials.weatherApiKey}}"
}
}In Code Nodes
const apiKey = inputs.secrets.MY_API_KEY;
const response = await fetch('https://api.example.com', {
headers: {
'Authorization': `Bearer ${apiKey}`
}
});Security
Encryption
- Credentials are encrypted at rest
- Transmitted over TLS
- Never logged or exposed in UI
Access Control
- Organization-level credentials
- Only admins can manage credentials
- Credentials not visible in flow exports
Best Practices
- Use descriptive names -
STRIPE_LIVE_KEYnotKEY1 - Rotate regularly - Update keys periodically
- Minimize access - Only store what you need
- Use environment separation - Different keys for dev/prod
Required Credentials by Integration
| Integration | Required Credentials |
|---|---|
| Email (Resend) | Resend API Key |
| Email (Gmail) | Gmail OAuth |
| SMS | Twilio Account SID, Auth Token |
| Voice | Twilio + ElevenLabs API Keys |
| Slack | Slack Bot Token |
| AI Models | OpenAI or Anthropic API Key |
Troubleshooting
Credential Not Found
- Verify exact name (case-sensitive)
- Check credential exists in settings
- Ensure you have access
Authentication Failing
- Verify key is correct and active
- Check key has required permissions
- Look for rate limiting or expiration
Next: Billing & Credits →