Important: All credentials are securely stored in 1Password (or Nango, for API connections) and are never revealed to our partners. Never hardcode usernames, passwords, API keys, or OTP values into instructions.
Agents need their own provisioned identity and scoped permissions — not borrowed human credentials — for optimal security and reliability.
Open Workspace Authentication
Open
Workspace settings.Select
Authentication.Review the authentication table.
Add A New Authentication
Click
Add.Fill in the required fields. See below for guidance!
Complete any external connection flow if one opens.
Click
Add.Confirm the new authentication appears in the
Authenticationtable.
Type
Single – You have credentials for one account only.
Pool – You have credentials for multiple accounts. Magical will distribute them automatically at runtime, allowing more runs to execute concurrently.
Use the Concurrency field to set the exact number of concurrent logins allowed by the website/platform. Leave blank if you're unsure, you can always adjust later!
Group
Yes – Your agent needs multiple credentials together to access one site (e.g., a username/password and a phone authentication code).
Credentials supported
Cookie
1Password
Phone Auth Code
Email Auth Code
API connection
Desktop connection
Native App connection
Remote Desktop Gateway
Proxy server
Edit An Existing Authentication
Open
Workspace settings.Select
Authentication.Click the authentication row you want to update.
In
Edit authentication, update the fields that need to change.Click
Save.Confirm the
Updated onvalue changes in the table.
Delete An Authentication
Open the authentication row.
Click
Delete.Confirm only when the authentication should no longer be available to workflows.
Important Boundaries
Credentials are workspace-level resources. After creating one, return to the automation or API agent and select it where needed.
Deleting a credential can break automations or API agents that rely on it.