Credential Vault

Store multiple accounts per platform (encrypted at rest, shown masked) and assign them to brands. Connected accounts power the Social Scheduler & Ads.

Social scheduler →

Add an account

PlatformLabelAccount ref (the platform's own id / URN — not a campaign)

Credentials (encrypted — never shown again in full)

Get access_token by connecting once: Social scheduler → Connect LinkedIn (OAuth). The client_id/secret are NOT entered here — they live in Gateway → Integration Keys. Account ref = your author URN (the Connect flow captures it automatically).

Connect to brand default for linkedinCampaigns belong to brands — this connects every campaign under the brand to this account.

Enter a Label to enable saving.

App / OAuth client keys

One-time, app-level keys (e.g. linkedin_client_id / secret) the OAuth Connect flow uses — shared across all brands. The per-brand accounts above are what each campaign actually publishes through.

Integration Keys

Connector credentials (LinkedIn, Meta, YouTube, TikTok, Google Ads, Google Business, Apollo + Hunter enrichment). Stored encrypted at rest — the value never leaves the server. Saving activates the connector immediately (no restart); a saved key overrides any .env value.

Need multiple accounts per platform (labeled, testable, assignable to brands) — e.g. two LinkedIn pages or several Apollo keys? Use the Credential Vault →. These single fields are the app-level fallback.