> ## Documentation Index
> Fetch the complete documentation index at: https://docs.selftune.dev/llms.txt
> Use this file to discover all available pages before exploring further.

# Service credentials

> Create scoped credentials for CI and internal Skill Set automation.

Team owners and admins can create service credentials from SelfTune Cloud. Use a
separate credential for each CI workflow or internal integration so you can
revoke one without interrupting the others.

## Choose the smallest preset

* **Publish from CI** can publish immutable Skill Set revisions and read status.
* **Release operator** can also promote or deprecate releases.
* **Status monitor** can read status without changing releases.

The preset is translated into explicit API scopes. Creating a credential does
not grant access to local skill contents, prompts, sessions, evaluations, project
paths, or rollback data.

## Save the token immediately

Cloud shows the complete token once, immediately after creation. Copy it into
your secret manager before dismissing the warning. Afterward Cloud stores and
shows only the credential name, token prefix, scopes, creation time, last-used
time, and revocation state.

SelfTune cannot reveal or recover a lost token. Revoke the credential and create
a replacement instead.

## Revoke safely

Revocation takes effect for future API authorization. The historical row remains
visible with its prefix and timestamps so teammates can understand which
integration stopped working without exposing the token.