Managing Credentials

Once you've added credentials to Forjinn, you can easily manage them to ensure they are up-to-date, secure, and correctly configured for your AI workflows. This guide covers how to view, search, filter, edit, and delete your credentials.

Accessing the Credentials Page

1. Navigate to Credentials: Go to /credentials from the dashboard, or click on "Credentials" under the Security section in the main navigation.
2. You will see a clean list/table view of all your saved credentials, showing their name, type, associated provider, and status at a glance. Sensitive values (API keys, tokens) are masked for security.

Searching and Filtering Credentials

The credentials page provides built-in search and filter capabilities:

• Search: Use the search bar at the top of the page to find credentials by name, type, or provider. Results update in real time as you type.
• Filter: Use the filter options to narrow down credentials by provider category (e.g., LLM providers, search tools, authentication methods) or by usage status.

Viewing Credential Details

To view the details of a specific credential:

1. Click on the Credential: Click on any row in the credentials table to open the detail view.
2. Review Configuration: The detail view shows the credential's name, type, provider, creation date, masked API value, and any additional configuration fields.
3. Check Dependencies: The detail view displays which flows are currently using this credential. This dependency tracking helps you understand the impact of editing or deleting a credential before you make changes.

Editing Credentials

You might need to edit a credential if an API key has changed, an endpoint URL is updated, or you need to modify other configuration parameters.

1. Select Credential: From the credentials list, click on the credential you wish to edit.
2. Click "Edit": Click the "Edit" button (or the pencil icon) in the credential detail view.
3. Make Changes: Modify the necessary fields on the provider-specific form. For example, you can update an API key, change a base URL, update an organization ID, or modify other provider-specific settings.
4. Save Changes: Click the "Save" or "Update" button to apply your modifications.

Impact of Editing

If you edit a credential that is actively used by one or more flows, all those flows will automatically use the updated configuration on their next execution. This is convenient but also means that an incorrect edit can affect multiple workflows at once. Always review the dependency list before making changes to shared credentials.

Deleting Credentials

If a credential is no longer needed or has been compromised, you should delete it promptly.

1. Select Credential: From the credentials list, click on the credential you wish to delete.
2. Review Dependencies: Before deleting, check the dependency section to see which flows are using this credential. Deleting it will break those flows.
3. Click "Delete": Click the "Delete" button in the credential detail view, or use the delete/trash icon directly from the credentials table.
4. Confirm Deletion: A confirmation dialog will appear, warning you about any flows that depend on this credential. Confirm to proceed. This action is irreversible.

Impact of Deleting

Deleting a credential will break any flows that rely on it. Those flows will fail at runtime until you create a replacement credential and update the affected flows to use it. Use the dependency tracking feature to identify impacted flows before deletion.

Credential Types Overview

Forjinn supports a comprehensive set of credential types, organized by provider category:

LLM Provider Credentials

• OpenAI API Key — Access GPT-4, GPT-3.5, and other OpenAI models
• Anthropic API Key — Access Claude models
• Google Generative AI — Access Gemini models
• AWS Bedrock — Access models through Amazon Bedrock
• Azure OpenAI — Access Azure-hosted OpenAI deployments
• Groq API Key — High-speed inference for supported models
• HuggingFace Token — Access the HuggingFace model hub

Search and Tool Credentials

• Google Search API Key — Web search via Google
• Serper API Key — Alternative web search service
• Wolfram Alpha AppID — Computational knowledge queries

Authentication Credentials

• HTTP Basic Auth — Username/password authentication
• HTTP Bearer Token — Token-based authentication
• Custom/Generic API Key — Flexible key-based auth for other services

Security Best Practices

• Monitor Usage: Regularly review the credentials list to identify keys that haven't been used recently and consider rotating or revoking them.
• Check Dependencies: Before making any changes, always review the flow dependencies listed for each credential.
• Rotate Regularly: Set a schedule to rotate API keys periodically, especially for production credentials.
• Use Descriptive Names: Name your credentials clearly (e.g., "Prod-OpenAI-GPT4", "Dev-Claude-Mini") so their purpose is obvious at a glance.
• Limit Access: In team environments, restrict credential management access to authorized users only through the Security section settings.

By keeping your credentials organized and up to date, you ensure that your flows remain secure and functional across all environments.