Secrets

Understand which credentials are proxied by the daemon and which are visible to agent containers.

Credential proxy

For supported integrations, the daemon proxies upstream calls and injects credentials server-side. This keeps most provider and integration secrets out of agent-visible configuration.

Agent environment

Some tools need credentials inside the agent container itself (an SSH key, a CLI token). Treat anything you set there as visible to the agent and pick the most-restricted credential that does the job.

Rotation

To rotate a credential, generate a new value at the upstream provider and save it in dispatchmy.ai Settings. The daemon picks up the new value on the next call.