Vault credential types
Grounded in vaults.md: max 20 credentials/vault, unique key per vault, secrets substituted at egress only.
environment_variablekey: secret_name
Substituted at egress only, keyed by allowed_hosts (limited|unrestricted). The agent never sees the real value; substitution requires the domain to be allowed at BOTH the credential and environment level. Not yet supported on self-hosted sandboxes.
source: vaults.md
mcp_oauthkey: mcp_server_urlauto-refresh
OAuth 2.0 for an MCP server. If a refresh block is supplied, Anthropic refreshes the access token automatically on expiry.
source: vaults.md
static_bearerkey: mcp_server_url
Fixed bearer token (API key/PAT) for an MCP server. No refresh flow needed.
source: vaults.md