ewilliams28/openclaw
1
0
Fork 0
mirror of https://github.com/openclaw/openclaw.git synced 2026-08-28 05:16:23 -06:00
Code Issues Packages Projects Releases Wiki Activity

docs(start): correct headless credential handoff to the SQLite auth store (#131024)

Browse Source
This commit is contained in:
Peter Steinberger
2026-08-27 09:40:27 -07:00
committed by GitHub
parent 59488aa80b
commit ff3cf3de3b
31 changed files with 121 additions and 89 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs/reference/api-usage-costs.md
+1 -1
View File
@@ -46,7 +46,7 @@ Anthropic has confirmed that Claude CLI reuse (including `claude -p`) is a sanct
## How keys are discovered
- **Auth profiles**: per-agent, stored in `auth-profiles.json`.
- **Auth profiles**: SQLite stores, with agent-local profiles overriding the shared read-through base. See [Auth credential semantics](/auth-credential-semantics#agent-copy-portability).
- **Environment variables**: for example `OPENAI_API_KEY`, `BRAVE_API_KEY`, `FIRECRAWL_API_KEY`.
- **Config**: `models.providers.*.apiKey`, `plugins.entries.*.config.webSearch.apiKey`, `plugins.entries.firecrawl.config.webFetch.apiKey`, `memory.search.*`, `talk.providers.*.apiKey`.
- **Skills**: `skills.entries.<name>.apiKey`, which may export the key to the skill process env.
docs/reference/secretref-credential-surface.md
+1 -1
View File
@@ -128,7 +128,7 @@ The lists below are generated from the source target registry and checked agains
- `channels.googlechat.serviceAccount`
- `channels.googlechat.accounts.*.serviceAccount`
### `auth-profiles.json` targets (`secrets configure` + `secrets apply` + `secrets audit`)
### SQLite auth-profile targets (`secrets configure` + `secrets apply` + `secrets audit`)
- `profiles.*.keyRef` (`type: "api_key"`; unsupported when `auth.profiles.<id>.mode = "oauth"`)
- `profiles.*.tokenRef` (`type: "token"`; unsupported when `auth.profiles.<id>.mode = "oauth"`)