Settings
Credentials

Credentials

Securely store API keys and secrets for your integrations.

Overview

Credentials store sensitive information like API keys, tokens, and passwords. They're encrypted at rest and accessed only when needed by your flows and integrations.

Managing Credentials

Via Lux Studio

  1. Navigate to SettingsCredentials
  2. Click Add Credential
  3. Select credential type
  4. Enter name and value
  5. Save

Via CLI

# Set a secret
lux secrets set OPENAI_API_KEY sk-abc123...
 
# List secrets
lux secrets list
 
# Get a secret
lux secrets get OPENAI_API_KEY
 
# Delete a secret
lux secrets delete OPENAI_API_KEY

Credential Types

API Keys

Simple key-value credentials for API authentication:

  • Resend API Key - Email sending
  • Twilio Credentials - SMS and voice
  • ElevenLabs API Key - Voice synthesis
  • OpenAI API Key - GPT models
  • Anthropic API Key - Claude models

OAuth Tokens

For services requiring OAuth:

  • Gmail - Send emails from Gmail account
  • Slack - Post to Slack channels
  • GitHub - Repository access

Custom Credentials

Store any secret your integrations need:

lux secrets set MY_CUSTOM_API_KEY my-secret-value

Using Credentials

In Flows

Reference credentials in flow nodes:

{
  "headers": {
    "Authorization": "Bearer {{secrets.OPENAI_API_KEY}}"
  }
}

In Custom Tools

{
  "headers": {
    "X-API-Key": "{{credentials.weatherApiKey}}"
  }
}

In Code Nodes

const apiKey = inputs.secrets.MY_API_KEY;
const response = await fetch('https://api.example.com', {
  headers: {
    'Authorization': `Bearer ${apiKey}`
  }
});

Security

Encryption

  • Credentials are encrypted at rest
  • Transmitted over TLS
  • Never logged or exposed in UI

Access Control

  • Organization-level credentials
  • Only admins can manage credentials
  • Credentials not visible in flow exports

Best Practices

  1. Use descriptive names - STRIPE_LIVE_KEY not KEY1
  2. Rotate regularly - Update keys periodically
  3. Minimize access - Only store what you need
  4. Use environment separation - Different keys for dev/prod

Required Credentials by Integration

IntegrationRequired Credentials
Email (Resend)Resend API Key
Email (Gmail)Gmail OAuth
SMSTwilio Account SID, Auth Token
VoiceTwilio + ElevenLabs API Keys
SlackSlack Bot Token
AI ModelsOpenAI or Anthropic API Key

Troubleshooting

Credential Not Found

  • Verify exact name (case-sensitive)
  • Check credential exists in settings
  • Ensure you have access

Authentication Failing

  • Verify key is correct and active
  • Check key has required permissions
  • Look for rate limiting or expiration

Next: Billing & Credits →