Guides
Production credential setup
Scope and store platform credentials for server-side domain management.
- Vercel: use a token with access to only the target team/project and set project plus optional team ID.
- Cloudflare: use a scoped API token with Custom Hostnames/SSL access to only the SaaS zone; configure and validate your fallback origin separately.
- Railway: use a project/workspace token limited to the target project, environment, and service.
Store secrets in your server's encrypted environment/secret manager. Rotate them after suspected exposure. Never return adapter options, request headers, or provider errors directly to a browser.
Read next: Security model.