snapshot: preserve central wiki state 2026-08-15 (7 modified + 1 new file)

infrastructure/credentials-map.md

@@ -0,0 +1,43 @@
+---
+title: Credentials Map
+type: infrastructure
+status: active
+created: 2026-07-22
+updated: 2026-07-22
+verified_on: 2026-07-22
+confidence: medium
+tags: [credentials, security, infrastructure]
+sources: []
+---
+
+# Credentials Map
+
+## Purpose
+Document where credentials are stored and what service they belong to.
+**No credential values are stored in this wiki.**
+
+## Storage Locations
+
+| Service | Credential Store | Location | Notes |
+|---|---|---|---|
+| Telegram Bot | Hermes config | `~/.hermes/config.yaml` | Not exposed in wiki |
+| Discord Bot | Hermes config | `~/.hermes/config.yaml` | Not exposed in wiki |
+| Email | Hermes config | `~/.hermes/config.yaml` |-connected via IMAP/SMTP |
+| Mattermost | Hermes config | `~/.hermes/config.yaml` | Connected |
+| CF Access (mcp-portal) | Hermes config | `~/.hermes/config.yaml` | Client ID + Secret |
+| LiteLLM | Hermes config | `~/.hermes/config.yaml` | API key |
+| OmniRoute | Hermes config | `~/.hermes/config.yaml` | API key |
+| Anthropic | Hermes config/OAuth | `~/.hermes/` | `.anthropic_oauth.json` |
+| API Vault | Hermes vault | via `hermes-api-vault` skill | Notion-backed vault |
+| Huawei Cloud | Terraform state / config | Unverified | |
+| GitHub | Hermes config / gh CLI | `~/.config/gh/` or `~/.hermes/` | Unverified |
+
+## Rules
+- Credentials never written to this wiki
+- API vault is first-stop for any key lookup
+- If vault lacks it, surface the gap to user — do not fabricate
+
+## Related
+- [[hosts]]
+- [[model-providers]]
+- [[messaging-integrations]]