> ## Documentation Index
> Fetch the complete documentation index at: https://docs.flowra.dev/llms.txt
> Use this file to discover all available pages before exploring further.

# App credentials

> Create project-level OAuth and API-key credentials (auth configs) so end users can connect toolkits.

The sidebar label is **App credentials** (route [Auth Config](https://flowra.dev/dashboard/auth-config)). These are **project-level** secrets — OAuth client id/secret or API keys — that agents and MCP use when end users connect.

They are **not** the same as [Connections](/product/connections):

|              | **App credentials**                     | **Connection**                               |
| ------------ | --------------------------------------- | -------------------------------------------- |
| Scope        | Whole project                           | Selected [end user](/product/external-users) |
| Holds        | Your Slack/Google app credentials, etc. | That user’s linked account tokens            |
| Typical step | Create once per toolkit                 | Each person completes OAuth                  |

Page help in the UI: *App credentials hold project-level secrets (OAuth app, API keys). Connections on the Connections page are per end user.*

## Create app credentials

<Steps>
  <Step title="Open App credentials">
    Go to [App credentials](https://flowra.dev/dashboard/auth-config). Confirm the correct project is selected.
  </Step>

  <Step title="Create">
    Click **Create app credentials**. Pick a toolkit that needs project credentials (for example Gmail OAuth). Managed cloud auth may be created automatically when users connect for some toolkits.
  </Step>

  <Step title="Fill provider fields">
    Enter the values the toolkit asks for (client id/secret, API key, …). Save.
  </Step>

  <Step title="Connect end users">
    Open [Connection](/product/connections) under each end user and complete OAuth. Do **not** ask end users for client secrets — those stay in App credentials.
  </Step>
</Steps>

If a connect flow says credentials are missing, create or bind App credentials for that toolkit first, then retry.

## Delete

Deleting credentials cannot be undone. The UI warns that all connected accounts under those credentials will be deleted, and agents or MCP servers bound to them will stop until you bind new credentials. Confirm by typing **DELETE** when prompted.

## Tips

* Search by name, toolkit, or scheme when the list is long.
* MCP **Install & Config** and Smart-mode toolkit binding can point at these credentials — see [MCP in the dashboard](/product/mcp-in-dashboard).
* For multi-tenant apps, keep one set of App credentials per toolkit and many Connections under different end users.

## Developers

API and SDK: [Auth configs](/guides/auth-configs). Link flow: [Connected accounts](/guides/connected-accounts).

## Related

* [Connections](/product/connections)
* [Projects and API keys](/product/projects-and-keys)
* [Toolkits and tools](/product/toolkits-and-tools)
* [Multi-tenancy](/guides/multi-tenancy)