> ## Documentation Index
> Fetch the complete documentation index at: https://docs.osschat.dev/llms.txt
> Use this file to discover all available pages before exploring further.

# /api/provider-credentials

> Manage encrypted user provider credentials.

# /api/provider-credentials

Supports `GET`, `POST`, and `DELETE` for provider credential state.

## GET

Returns normalized connection list for all supported providers.

## POST

Stores encrypted provider secret.

Request body:

```json theme={null}
{
  "provider": "openai",
  "authType": "apiKey",
  "secret": "sk-...",
  "displayName": "optional"
}
```

## DELETE

Removes provider credential for current authenticated user.

Request body:

```json theme={null}
{
  "provider": "openai"
}
```

## Security

* Same-origin required.
* Auth required.
* Per-user/provider rate limits on mutation operations.
* Secrets encrypted before storage.