---
credentials:
jwt_secret:
description: Key Fider signs its session and e-mail sign-in tokens with. Held separately from any login password, because a password change would otherwise
invalidate every issued token.
algorithm: alphanumeric
validation: "^[A-Za-z0-9]{32,}$"
length: 64
mcp_bearer:
description: "Bearer an MCP client must present to this role's adapter instance. Distinct from the upstream credential the adapter presents, because authenticating
to the application says nothing about who called the adapter."
algorithm: alphanumeric
validation: "^[A-Za-z0-9]{32,}$"
length: 48
