Credentials

Third-party keys the MCP servers use on an agent's behalf. Octopus validates each one, reads back what it can actually do, and never lets the secret reach a prompt.

Stored credentials

NameProviderIdentityStateReachable fromTools
Loading…

GitHub App

Loading…

An installed App mints a short-lived token per operation, scoped to one repository, and stores nothing long-lived. A personal access token in the table above is the alternative: simpler to set up, and yours rather than the App's.

Recent decisions

WhenVerdictToolCredentialTaskReason
Loading…