Target credentials with an agent

Use the same registered credential tools as an inbound credential. Set credentialType to target. Stored secrets are redacted by default.

Call get_guide with guide_key: "credential-creation" before the first create.

Call order

1. Call create_credential.
   • Required: clientId, credentialName, credentialType: "target", credentialAuthType, credentialRegion, credentialSecret.
   • Optional: credentialNotes, pendingFields.
2. Keep the returned sKey.
3. Select the credential on a proxy or direct MCP server in the same region.

Use list_credentials(clientId) and get_credential(clientId, credentialId) to inspect records. update_credential changes only optional credentialName and credentialNotes; create a replacement to rotate a secret.

Example

{
  "tool": "create_credential",
  "arguments": {
    "clientId": "b3a1c7d2-5e44-4f0a-9c1e-7d2f8a6b1c90",
    "credentialName": "HTTPBin none",
    "credentialType": "target",
    "credentialAuthType": "none",
    "credentialRegion": "us-east-2",
    "credentialSecret": {}
  }
}

The result contains the credential id and no secret material.

Next