Secrets
Understand which credentials are proxied by the daemon and which are visible to agent containers.
Credential proxy
For supported integrations, the daemon proxies upstream calls and injects credentials server-side. This keeps most provider and integration secrets out of agent-visible configuration.
Agent environment
Some tools need credentials inside the agent container itself (an SSH key, a CLI token). Treat anything you set there as visible to the agent and pick the most-restricted credential that does the job.
Rotation
To rotate a credential, generate a new value at the upstream provider and save it in dispatchmy.ai Settings. The daemon picks up the new value on the next call.