---
title: Credentials Map
type: infrastructure
status: active
created: 2026-07-22
updated: 2026-07-22
verified_on: 2026-07-22
confidence: medium
tags: [credentials, security, infrastructure]
sources: []
---

# Credentials Map

## Purpose
Document where credentials are stored and what service they belong to.
**No credential values are stored in this wiki.**

## Storage Locations

| Service | Credential Store | Location | Notes |
|---|---|---|---|
| Telegram Bot | Hermes config | `~/.hermes/config.yaml` | Not exposed in wiki |
| Discord Bot | Hermes config | `~/.hermes/config.yaml` | Not exposed in wiki |
| Email | Hermes config | `~/.hermes/config.yaml` |-connected via IMAP/SMTP |
| Mattermost | Hermes config | `~/.hermes/config.yaml` | Connected |
| CF Access (mcp-portal) | Hermes config | `~/.hermes/config.yaml` | Client ID + Secret |
| LiteLLM | Hermes config | `~/.hermes/config.yaml` | API key |
| OmniRoute | Hermes config | `~/.hermes/config.yaml` | API key |
| Anthropic | Hermes config/OAuth | `~/.hermes/` | `.anthropic_oauth.json` |
| API Vault | Hermes vault | via `hermes-api-vault` skill | Notion-backed vault |
| Huawei Cloud | Terraform state / config | Unverified | |
| GitHub | Hermes config / gh CLI | `~/.config/gh/` or `~/.hermes/` | Unverified |

## Rules
- Credentials never written to this wiki
- API vault is first-stop for any key lookup
- If vault lacks it, surface the gap to user — do not fabricate

## Related
- [[hosts]]
- [[model-providers]]
- [[messaging-integrations]]