The Vault
Where the keys, sign-ins and logins behind your connections are kept, shared and audited.
The Vault is where Giga keeps the credentials behind your connections. Find it in the Vault section of the Giga web app.
Secrets in the Vault are encrypted, never sent back to your browser, and never shown to the AI. When Giga uses a connection, the secure proxy adds the secret on Giga's servers.
What's in the Vault
| Section | What it holds |
|---|---|
| API Keys | Keys and tokens for services that don't use OAuth. Giga attaches them to requests for you, so they're never pasted into a chat. |
| OAuth Connections | Accounts you've signed in to with OAuth, like Google or Slack. Giga refreshes them automatically. |
| Logins | Usernames and passwords for sites without an API. Agents use them in a browser session. |
| Databases | Connection details for your own databases, so agents can query them. |
| Browser Sessions | Saved signed-in browser state, so agents can pick up where you left off without logging in again. |
| Model Providers | Your own AI model keys, next to the always-available Giga managed provider. Learn more → |
You see the credentials you added, plus the ones shared with you.
Adding a credential
Use New at the top of the Vault sidebar:
- Integration: opens the Integrations search, where you find an app and connect it.
- API key, login, database and other custom types: opens a secure form where you enter the details directly.
Each credential's page
Open a credential to see its details. If you added it, you can:
- Rename it, and change its handle, the short name agents use to refer to it
- add a note for your team
- share it with Groups or specific people
- link it to Tracks, so it's at hand when someone works on that Track
People it's shared with can use it, but only the person who added it can change or remove it. How sharing works →
Every use is recorded
Each time a credential is used, Giga records who used it, when, and what for (the site or API it called, or a preview of the query). Secrets, request headers and bodies are never recorded.
See the record in Activity & usage → Credential activity: your own uses, plus every use of credentials you own. Learn about Activity & usage →