Store API tokens, keys, and credentials in a workspace vault. Values are encrypted at rest and only decrypted when an integration or agent run needs them.
- AES-256-GCM encryption with workspace-scoped keys
- Audit-logged access
- Referenced by name in integrations and actions