Credentials are API keys for calling JustDeploy programmatically, handy when an external system or script needs to reach the API directly. Each credential has an Access Key (like a username) and a Secret Key (like a password).
Create a new credential from the Credentials page. You can optionally set an expiration date for extra security.
To call the API from an external system, send both in one header, joined by a colon:
Authorization: Bearer YOUR_ACCESS_KEY:YOUR_SECRET_KEYKeys created here can deploy apps and change or delete organization data and settings. Give them only to tools you trust. Every key can do all of that, including the ones your AI issues for an app, so there is no such thing as a safer key to leave lying around. Code you deploy does not need one at all: the SDK authenticates itself.