Credential store
The credential store keeps API keys out of your workflow. You add a credential once, then pick it from a dropdown on any node that needs it — Flux injects it at run time and the key itself stays encrypted.
Every credential type
AI models
| Credential | Used by |
|---|---|
| OpenAI API Key | GPT Model node |
| Gemini API Key | Gemini Model node |
Speech
| Credential | Provider |
|---|---|
| Google Cloud Speech-To-Text | Google Cloud |
| Google Cloud Text-To-Speech | Google Cloud |
| Microsoft Azure Speech-To-Text | Microsoft Azure |
| Microsoft Azure Text-To-Speech | Microsoft Azure |
| Eleven Labs Speech-To-Text | Eleven Labs |
| Eleven Labs Text-To-Speech | Eleven Labs |
Messaging
| Credential | Needs |
|---|---|
| Twilio | Account ID, Auth Token, Service ID |
| Infobip | API Key, Base URL |
| Telegram | Bot token from BotFather |
| Page connection | |
| Account connection, through its page |
The credential store dialog listing saved credentials with their type, and the Add New form open with a credential name and type dropdown
Screenshot to be addedAdding one
- Open Credential Store from the module.
- Add New.
- Give it a name you will recognise in a dropdown later.
- Pick the type. The form changes to ask for what that provider needs.
- Fill in the fields and save.
Your keys or Flux's
Flux's built-in keys
Leave a model node on the default and Flux uses its own OpenAI or Gemini key. Usage is billed to your project's credits wallet. Nothing to set up.
Your own key
Store it here and select it on the node. You are billed directly by the provider, on your own agreement and rate limits.
How nodes reference a credential
Through the CREDENTIAL keyword in the
template
language:
{{CREDENTIAL DEFAULT}} the built-in key
{{CREDENTIAL id}} one of yours, by id
Why it is worth the extra step
- The key is encrypted rather than sitting in plain text in a node's configuration.
- Rotation is one edit — update the credential and every node using it follows.
- Templates stay shareable. Save a workflow as a template and the credential reference travels without the secret.
Rotating a key
Edit the credential and replace the value. Nodes reference it by id, so nothing on the canvas needs touching. If a key has leaked, revoke it at the provider as well — removing it from Flux stops Flux using it, not anyone else.