--- title: "Credentials" url: https://services.dev/docs/reference/credentials --- # Credentials URL: https://services.dev/docs/reference/credentials > Every credential that can call a brand: who holds it, its prefix, the surfaces it reaches and each operation it can call. 9 credentials, 6 live. Only a credential that is a person approves or signs: a key or a tool never can. Each operation's own row names who may call it, in [Operations](https://services.dev/docs/reference/operations.md). | Credential | Prefix | Held by | Can | Reaches | A person | Presented as | |---|---|---|---|---|---|---| | secret key, test mode | `sk_test_` | a buyer | order, read, accept, send back, cancel, end, watch, and run test clocks | API, CLI, MCP, SDK | no | bearer | | secret key | `sk_live_` | a buyer | order, read, accept, send back, cancel, end, watch | API, CLI, MCP, SDK | no | bearer | | delegated key | `dlg_` | an agent a party delegated, scoped by Service and time | order within its cap; complete answer and upload asks; read that party's jobs | API, MCP, SDK | no | bearer | | party link | an ask's url | the named party, with no account | complete that one ask, once | API | yes | link | | member session | ms_ session | a member, in the delivery portal or the member CLI | every member act: join, set availability, keep their conflicts ledger, read their feed, claim, clear and do a Task | API, CLI | yes | session | | tenant key | `tk_` | an integrator, with On-Behalf-Of | order for its customer; read with consent | API, SDK | no | bearer | | owner session | — | the owner and staff roles | the console, staff acts | API, CLI | yes | session | | verifier token | `vt_` | a Pool's or the brand's verifier | write verified facts | API | no | bearer | | webhook secret | `whsec_` | a watch | verify deliveries | SDK | no | signature | ## What each can call | Credential | Calls | Operations it can call | |---|---|---| | secret key, test mode | 37 | [`service.order`](https://services.dev/docs/reference/operations.md#serviceorder), [`job.get`](https://services.dev/docs/reference/operations.md#jobget), [`job.wait`](https://services.dev/docs/reference/operations.md#jobwait), [`job.list`](https://services.dev/docs/reference/operations.md#joblist), [`job.accept`](https://services.dev/docs/reference/operations.md#jobaccept), [`job.send_back`](https://services.dev/docs/reference/operations.md#jobsend_back), [`job.cancel`](https://services.dev/docs/reference/operations.md#jobcancel), [`job.end`](https://services.dev/docs/reference/operations.md#jobend), [`job.again`](https://services.dev/docs/reference/operations.md#jobagain), [`job.policy`](https://services.dev/docs/reference/operations.md#jobpolicy), [`job.signal`](https://services.dev/docs/reference/operations.md#jobsignal), [`job.message`](https://services.dev/docs/reference/operations.md#jobmessage), [`job.thread`](https://services.dev/docs/reference/operations.md#jobthread), [`job.record`](https://services.dev/docs/reference/operations.md#jobrecord), [`subject.list`](https://services.dev/docs/reference/operations.md#subjectlist), [`subject.get`](https://services.dev/docs/reference/operations.md#subjectget), [`clock.list`](https://services.dev/docs/reference/operations.md#clocklist), [`clock.get`](https://services.dev/docs/reference/operations.md#clockget), [`clock.ack`](https://services.dev/docs/reference/operations.md#clockack), [`clock.satisfy`](https://services.dev/docs/reference/operations.md#clocksatisfy), [`clock.choose`](https://services.dev/docs/reference/operations.md#clockchoose), [`subscription.list`](https://services.dev/docs/reference/operations.md#subscriptionlist), [`subscription.get`](https://services.dev/docs/reference/operations.md#subscriptionget), [`subscription.cancel`](https://services.dev/docs/reference/operations.md#subscriptioncancel), [`ask.reissue`](https://services.dev/docs/reference/operations.md#askreissue), [`job.files.list`](https://services.dev/docs/reference/operations.md#jobfileslist), [`job.files.put`](https://services.dev/docs/reference/operations.md#jobfilesput), [`job.files.get`](https://services.dev/docs/reference/operations.md#jobfilesget), [`test_clock.create`](https://services.dev/docs/reference/operations.md#test_clockcreate), [`test_clock.advance`](https://services.dev/docs/reference/operations.md#test_clockadvance), [`event.list`](https://services.dev/docs/reference/operations.md#eventlist), [`event.stream`](https://services.dev/docs/reference/operations.md#eventstream), [`watch.create`](https://services.dev/docs/reference/operations.md#watchcreate), [`watch.list`](https://services.dev/docs/reference/operations.md#watchlist), [`watch.delete`](https://services.dev/docs/reference/operations.md#watchdelete), [`watch.replay`](https://services.dev/docs/reference/operations.md#watchreplay), [`event.inbound`](https://services.dev/docs/reference/operations.md#eventinbound) | | secret key | 35 | [`service.order`](https://services.dev/docs/reference/operations.md#serviceorder), [`job.get`](https://services.dev/docs/reference/operations.md#jobget), [`job.wait`](https://services.dev/docs/reference/operations.md#jobwait), [`job.list`](https://services.dev/docs/reference/operations.md#joblist), [`job.accept`](https://services.dev/docs/reference/operations.md#jobaccept), [`job.send_back`](https://services.dev/docs/reference/operations.md#jobsend_back), [`job.cancel`](https://services.dev/docs/reference/operations.md#jobcancel), [`job.end`](https://services.dev/docs/reference/operations.md#jobend), [`job.again`](https://services.dev/docs/reference/operations.md#jobagain), [`job.policy`](https://services.dev/docs/reference/operations.md#jobpolicy), [`job.signal`](https://services.dev/docs/reference/operations.md#jobsignal), [`job.message`](https://services.dev/docs/reference/operations.md#jobmessage), [`job.thread`](https://services.dev/docs/reference/operations.md#jobthread), [`job.record`](https://services.dev/docs/reference/operations.md#jobrecord), [`subject.list`](https://services.dev/docs/reference/operations.md#subjectlist), [`subject.get`](https://services.dev/docs/reference/operations.md#subjectget), [`clock.list`](https://services.dev/docs/reference/operations.md#clocklist), [`clock.get`](https://services.dev/docs/reference/operations.md#clockget), [`clock.ack`](https://services.dev/docs/reference/operations.md#clockack), [`clock.satisfy`](https://services.dev/docs/reference/operations.md#clocksatisfy), [`clock.choose`](https://services.dev/docs/reference/operations.md#clockchoose), [`subscription.list`](https://services.dev/docs/reference/operations.md#subscriptionlist), [`subscription.get`](https://services.dev/docs/reference/operations.md#subscriptionget), [`subscription.cancel`](https://services.dev/docs/reference/operations.md#subscriptioncancel), [`ask.reissue`](https://services.dev/docs/reference/operations.md#askreissue), [`job.files.list`](https://services.dev/docs/reference/operations.md#jobfileslist), [`job.files.put`](https://services.dev/docs/reference/operations.md#jobfilesput), [`job.files.get`](https://services.dev/docs/reference/operations.md#jobfilesget), [`event.list`](https://services.dev/docs/reference/operations.md#eventlist), [`event.stream`](https://services.dev/docs/reference/operations.md#eventstream), [`watch.create`](https://services.dev/docs/reference/operations.md#watchcreate), [`watch.list`](https://services.dev/docs/reference/operations.md#watchlist), [`watch.delete`](https://services.dev/docs/reference/operations.md#watchdelete), [`watch.replay`](https://services.dev/docs/reference/operations.md#watchreplay), [`event.inbound`](https://services.dev/docs/reference/operations.md#eventinbound) | | delegated key | 31 | [`service.order`](https://services.dev/docs/reference/operations.md#serviceorder), [`job.get`](https://services.dev/docs/reference/operations.md#jobget), [`job.wait`](https://services.dev/docs/reference/operations.md#jobwait), [`job.list`](https://services.dev/docs/reference/operations.md#joblist), [`job.accept`](https://services.dev/docs/reference/operations.md#jobaccept), [`job.send_back`](https://services.dev/docs/reference/operations.md#jobsend_back), [`job.cancel`](https://services.dev/docs/reference/operations.md#jobcancel), [`job.end`](https://services.dev/docs/reference/operations.md#jobend), [`job.again`](https://services.dev/docs/reference/operations.md#jobagain), [`job.policy`](https://services.dev/docs/reference/operations.md#jobpolicy), [`job.signal`](https://services.dev/docs/reference/operations.md#jobsignal), [`job.message`](https://services.dev/docs/reference/operations.md#jobmessage), [`job.thread`](https://services.dev/docs/reference/operations.md#jobthread), [`job.record`](https://services.dev/docs/reference/operations.md#jobrecord), [`subject.list`](https://services.dev/docs/reference/operations.md#subjectlist), [`subject.get`](https://services.dev/docs/reference/operations.md#subjectget), [`clock.list`](https://services.dev/docs/reference/operations.md#clocklist), [`clock.get`](https://services.dev/docs/reference/operations.md#clockget), [`clock.ack`](https://services.dev/docs/reference/operations.md#clockack), [`clock.satisfy`](https://services.dev/docs/reference/operations.md#clocksatisfy), [`clock.choose`](https://services.dev/docs/reference/operations.md#clockchoose), [`subscription.list`](https://services.dev/docs/reference/operations.md#subscriptionlist), [`subscription.get`](https://services.dev/docs/reference/operations.md#subscriptionget), [`subscription.cancel`](https://services.dev/docs/reference/operations.md#subscriptioncancel), [`ask.reissue`](https://services.dev/docs/reference/operations.md#askreissue), [`job.files.list`](https://services.dev/docs/reference/operations.md#jobfileslist), [`job.files.put`](https://services.dev/docs/reference/operations.md#jobfilesput), [`job.files.get`](https://services.dev/docs/reference/operations.md#jobfilesget), [`event.list`](https://services.dev/docs/reference/operations.md#eventlist), [`event.stream`](https://services.dev/docs/reference/operations.md#eventstream), [`event.inbound`](https://services.dev/docs/reference/operations.md#eventinbound) | | party link | 4 | [`ask.get`](https://services.dev/docs/reference/operations.md#askget), [`ask.complete`](https://services.dev/docs/reference/operations.md#askcomplete), [`ask.revoke`](https://services.dev/docs/reference/operations.md#askrevoke), [`key.raise`](https://services.dev/docs/reference/operations.md#keyraise) | | member session | 32 | [`job.send_back`](https://services.dev/docs/reference/operations.md#jobsend_back), [`job.approve`](https://services.dev/docs/reference/operations.md#jobapprove), [`member.join`](https://services.dev/docs/reference/operations.md#memberjoin), [`member.availability`](https://services.dev/docs/reference/operations.md#memberavailability), [`member.ledger.get`](https://services.dev/docs/reference/operations.md#memberledgerget), [`member.ledger.add`](https://services.dev/docs/reference/operations.md#memberledgeradd), [`member.ledger.checks`](https://services.dev/docs/reference/operations.md#memberledgerchecks), [`member.missed`](https://services.dev/docs/reference/operations.md#membermissed), [`member.earnings`](https://services.dev/docs/reference/operations.md#memberearnings), [`member.track`](https://services.dev/docs/reference/operations.md#membertrack), [`task.list`](https://services.dev/docs/reference/operations.md#tasklist), [`task.get`](https://services.dev/docs/reference/operations.md#taskget), [`task.sheet`](https://services.dev/docs/reference/operations.md#tasksheet), [`task.pass`](https://services.dev/docs/reference/operations.md#taskpass), [`task.claim`](https://services.dev/docs/reference/operations.md#taskclaim), [`task.clear`](https://services.dev/docs/reference/operations.md#taskclear), [`task.packet`](https://services.dev/docs/reference/operations.md#taskpacket), [`task.release`](https://services.dev/docs/reference/operations.md#taskrelease), [`task.attest`](https://services.dev/docs/reference/operations.md#taskattest), [`task.send_back`](https://services.dev/docs/reference/operations.md#tasksend_back), [`task.decline`](https://services.dev/docs/reference/operations.md#taskdecline), [`task.recuse`](https://services.dev/docs/reference/operations.md#taskrecuse), [`task.extend`](https://services.dev/docs/reference/operations.md#taskextend), [`task.contest`](https://services.dev/docs/reference/operations.md#taskcontest), [`task.message`](https://services.dev/docs/reference/operations.md#taskmessage), [`member.subjects`](https://services.dev/docs/reference/operations.md#membersubjects), [`subject.withdraw`](https://services.dev/docs/reference/operations.md#subjectwithdraw), [`clock.list`](https://services.dev/docs/reference/operations.md#clocklist), [`clock.get`](https://services.dev/docs/reference/operations.md#clockget), [`clock.ack`](https://services.dev/docs/reference/operations.md#clockack), [`clock.satisfy`](https://services.dev/docs/reference/operations.md#clocksatisfy), [`clock.choose`](https://services.dev/docs/reference/operations.md#clockchoose) | | tenant key | 17 | [`service.order`](https://services.dev/docs/reference/operations.md#serviceorder), [`job.get`](https://services.dev/docs/reference/operations.md#jobget), [`job.wait`](https://services.dev/docs/reference/operations.md#jobwait), [`job.list`](https://services.dev/docs/reference/operations.md#joblist), [`job.record`](https://services.dev/docs/reference/operations.md#jobrecord), [`subject.list`](https://services.dev/docs/reference/operations.md#subjectlist), [`subject.get`](https://services.dev/docs/reference/operations.md#subjectget), [`clock.list`](https://services.dev/docs/reference/operations.md#clocklist), [`clock.get`](https://services.dev/docs/reference/operations.md#clockget), [`subscription.list`](https://services.dev/docs/reference/operations.md#subscriptionlist), [`subscription.get`](https://services.dev/docs/reference/operations.md#subscriptionget), [`job.files.list`](https://services.dev/docs/reference/operations.md#jobfileslist), [`job.files.put`](https://services.dev/docs/reference/operations.md#jobfilesput), [`job.files.get`](https://services.dev/docs/reference/operations.md#jobfilesget), [`event.list`](https://services.dev/docs/reference/operations.md#eventlist), [`event.stream`](https://services.dev/docs/reference/operations.md#eventstream), [`event.inbound`](https://services.dev/docs/reference/operations.md#eventinbound) | | owner session | 34 | [`job.list`](https://services.dev/docs/reference/operations.md#joblist), [`job.send_back`](https://services.dev/docs/reference/operations.md#jobsend_back), [`job.end`](https://services.dev/docs/reference/operations.md#jobend), [`job.policy`](https://services.dev/docs/reference/operations.md#jobpolicy), [`job.record`](https://services.dev/docs/reference/operations.md#jobrecord), [`job.approve`](https://services.dev/docs/reference/operations.md#jobapprove), [`member.join`](https://services.dev/docs/reference/operations.md#memberjoin), [`task.list`](https://services.dev/docs/reference/operations.md#tasklist), [`task.get`](https://services.dev/docs/reference/operations.md#taskget), [`task.offer`](https://services.dev/docs/reference/operations.md#taskoffer), [`task.contest`](https://services.dev/docs/reference/operations.md#taskcontest), [`subject.list`](https://services.dev/docs/reference/operations.md#subjectlist), [`subject.get`](https://services.dev/docs/reference/operations.md#subjectget), [`clock.list`](https://services.dev/docs/reference/operations.md#clocklist), [`clock.get`](https://services.dev/docs/reference/operations.md#clockget), [`clock.ack`](https://services.dev/docs/reference/operations.md#clockack), [`clock.satisfy`](https://services.dev/docs/reference/operations.md#clocksatisfy), [`clock.choose`](https://services.dev/docs/reference/operations.md#clockchoose), [`clock.assign`](https://services.dev/docs/reference/operations.md#clockassign), [`subscription.list`](https://services.dev/docs/reference/operations.md#subscriptionlist), [`subscription.get`](https://services.dev/docs/reference/operations.md#subscriptionget), [`subscription.cancel`](https://services.dev/docs/reference/operations.md#subscriptioncancel), [`member.login`](https://services.dev/docs/reference/operations.md#memberlogin), [`ask.get`](https://services.dev/docs/reference/operations.md#askget), [`ask.reissue`](https://services.dev/docs/reference/operations.md#askreissue), [`job.files.list`](https://services.dev/docs/reference/operations.md#jobfileslist), [`job.files.put`](https://services.dev/docs/reference/operations.md#jobfilesput), [`job.files.get`](https://services.dev/docs/reference/operations.md#jobfilesget), [`receipt.answer`](https://services.dev/docs/reference/operations.md#receiptanswer), [`job.export`](https://services.dev/docs/reference/operations.md#jobexport), [`job.ledger`](https://services.dev/docs/reference/operations.md#jobledger), [`test_clock.create`](https://services.dev/docs/reference/operations.md#test_clockcreate), [`test_clock.advance`](https://services.dev/docs/reference/operations.md#test_clockadvance), [`event.list`](https://services.dev/docs/reference/operations.md#eventlist) | | verifier token | 1 | [`member.verify`](https://services.dev/docs/reference/operations.md#memberverify) | | webhook secret | 0 | — | | anyone, with no credential | 14 | [`service.quote`](https://services.dev/docs/reference/operations.md#servicequote), [`service.waitlist`](https://services.dev/docs/reference/operations.md#servicewaitlist), [`service.list`](https://services.dev/docs/reference/operations.md#servicelist), [`service.get`](https://services.dev/docs/reference/operations.md#serviceget), [`key.create`](https://services.dev/docs/reference/operations.md#keycreate), [`brand.home`](https://services.dev/docs/reference/operations.md#brandhome), [`brand.health`](https://services.dev/docs/reference/operations.md#brandhealth), [`sandbox.fixtures`](https://services.dev/docs/reference/operations.md#sandboxfixtures), [`brand.card`](https://services.dev/docs/reference/operations.md#brandcard), [`brand.openapi`](https://services.dev/docs/reference/operations.md#brandopenapi), [`brand.llms`](https://services.dev/docs/reference/operations.md#brandllms), [`brand.manifest`](https://services.dev/docs/reference/operations.md#brandmanifest), [`brand.pricing`](https://services.dev/docs/reference/operations.md#brandpricing), [`brand.verify`](https://services.dev/docs/reference/operations.md#brandverify) | --- - Up: [Your first paid job](https://services.dev/docs.md) - Previous: [Every key](https://services.dev/docs/reference/keys.md) - Next: [Events](https://services.dev/docs/reference/events.md)