Skip to main content
Team owners and admins can create service credentials from SelfTune Cloud. Use a separate credential for each CI workflow or internal integration so you can revoke one without interrupting the others.

​
Choose the smallest preset

  • Publish from CI can publish immutable Skill Set revisions and read status.
  • Release operator can also promote or deprecate releases.
  • Status monitor can read status without changing releases.
The preset is translated into explicit API scopes. Creating a credential does not grant access to local skill contents, prompts, sessions, evaluations, project paths, or rollback data.

​
Save the token immediately

Cloud shows the complete token once, immediately after creation. Copy it into your secret manager before dismissing the warning. Afterward Cloud stores and shows only the credential name, token prefix, scopes, creation time, last-used time, and revocation state. SelfTune cannot reveal or recover a lost token. Revoke the credential and create a replacement instead.

​
Revoke safely

Revocation takes effect for future API authorization. The historical row remains visible with its prefix and timestamps so teammates can understand which integration stopped working without exposing the token.