---
credentials:
app_key:
description: "Generic 32-byte base64 key with base64: prefix"
algorithm: base64_prefixed_32
validation: ^base64:[A-Za-z0-9+/]{43}=$
mcp_bearer:
description: "Bearer an MCP client must present to this role's adapter instance. Distinct from the upstream credential the adapter presents, because authenticating
to the application says nothing about who called the adapter."
algorithm: alphanumeric
validation: "^[A-Za-z0-9]{32,}$"
length: 48
sso_proxy_secret:
description: "Shared secret the reverse proxy sends with every request; Apache in the Snipe-IT container only turns the trusted identity header into the login
variable when it matches."
algorithm: alphanumeric
validation: "^[A-Za-z0-9]{32,}$"
length: 48
