Help centre
Passwords and API keys
How your agent asks for a credential, and why you should never paste one into chat.
On this page3 sections
Some work needs a credential: an API key, a password, or access to an account. Your agent never asks you to paste one into the chat.
How your agent asks
When it needs a credential, the agent pauses that task and Spiron sends you a secure form: in Telegram, a form that opens inside the app; on the web, a secure input card; or a one-time link. You enter the value there. It goes straight to Spiron, is stored encrypted, and the agent is told only that it is ready. For services that support it, you connect with a sign-in button instead.
If you paste one anyway
Spiron removes anything that looks like a secret from a chat message before it is stored or shown to the agent, and deletes the original message when the bot is allowed to. Treat a pasted credential as exposed and rotate it.
Seeing and removing credentials
Credentials in your dashboard lists what each agent holds, where each value came from, and when it was last used. Delete one there at any time.
Still stuck?
Write to a person.
Email support@spiron.ai. A person answers within 1 business day.
Read next
- Getting startedSign up, send your Assistant one line, and read its reply, in under two minutes.
- Working with your agentHand over an objective, steer it while it works, stop or resume it, and approve the actions that matter.
- Connect an MCP agentConnect Claude Code or another MCP client, authorize your workspace and send work to an existing Spiron agent.
- Getting supportHow to reach support by email, what to include, and when to expect an answer.