Credential control

Keys and service accounts

Create a least-privilege credential, reveal it once, run a working request, and trace every lifecycle event. Rotating a credential invalidates the old key immediately, so update the integration with the new key before its next request. Live and test credentials are deployment-isolated.