What is credential vault?
A credential vault is encrypted, per-tenant storage for the secrets an authenticated workflow requires. A secret is referenced in a goal or a compiled path as a token rather than a value, and resolved inside the isolated browser session at fill time. Listing returns names and creation dates; there is no endpoint that returns a value.
Why it matters
Authenticated automation is impossible without a safe place for credentials, and unsafe credential handling is a non-starter. Write-only is the property that matters: a compromised read cannot exfiltrate a secret, because no read returns one.