[0libote]

Keeping SSH passwords and API tokens in skill files puts them in agent chats.

This adds a Server credentials page in Setup to save, edit, test and delete these connections. Copy a connection's helper command and ID straight into a skill. The t3-ssh and t3-api helpers read credentials internally and filter matching values from their output. Saved secrets are hidden when editing and can be replaced without displaying the old value.

API connections support bearer tokens, custom headers with optional prefixes, and query parameters. Set a test path for each service.

Credentials persist on the volume as owner-only plaintext. Agents with shell access can still read them.

Validation: 958 tests passed, including legacy bearer compatibility and each authentication mode. All 10 UI configurations passed. Docker image validation was not run locally.

Screenshots

Example data throughout; connection test results are simulated. Click an image to view it full size.

View	Light mode	Dark mode
Empty page
Add an SSH connection
Add API credentials
Custom header and prefix
Query parameter key
Bearer token
Saved connections
Copy a command for a skill
Edit API credentials
Phone editor
Connection test results
Delete confirmation
Conflicting edits