Skip to content
MCP Gateway

Create a credential binding

A credential binding ties a secret (referenced in your secret manager, never inlined) to an upstream under one of the credential modes. The broker resolves it at the edge — the secret never reaches the agent or audit.

  1. Validate the binding (mode, secret reference, scope).
  2. Create it — it enters approval.
  3. Rotate / disable / revoke over its lifetime as needed.

Create the binding

Section titled “Create the binding”
Create a credential binding
  1. Open Access → Credential bindings → New.
  2. Choose the credential mode, select approved targets and active policies, and point at the secret reference.
  3. For Agent scoped, select one approved agent. The selection becomes the immutable agent subject.
  4. Confirm every item under Ready for review, then submit the binding.

An agent_scoped binding cannot activate until the selected agent is approved for that environment and credential mode. The detail page shows the expected agent, identity source, allowed surfaces, and instance requirements. Create a replacement binding when ownership must move to another agent.

Activation rechecks the selected server or imported API operation and every policy reference. A deleted, unselected, unpublished, inactive, or unapproved reference blocks activation before a runtime projection is created. An imported API source may still be awaiting approval because its approval step verifies the credential binding. The source remains unavailable to runtime traffic until that later approval succeeds.

The detail page reports a credential locator as Reference accepted after its format and lifecycle checks pass. The gateway verifies provider material only when a permitted runtime call resolves the locator. This distinction prevents a typed Vault, AWS, Azure, GCP, or Kubernetes path from appearing as a successful secret-manager lookup before one has occurred.

Rotate, disable, or revoke

Section titled “Rotate, disable, or revoke”
Rotate or revoke a binding
gatewayctl credential-binding rotate cb_123 --format json

credential-binding supports list / get / update / rotate / disable / revoke / status.

Type set in Geist, Source Serif 4, and Departure Mono.