sap-btp-credential-storelisted
Install: claude install-skill williamcorrea23/sap-router-skill
# SAP BTP Credential Store
Secure vault for credentials and secrets on SAP BTP — encrypted storage with access control and audit logging.
## Prerequisites
- SAP BTP subaccount with Cloud Foundry enabled
- CF CLI installed and logged in (`cf login`)
- Credential Store entitlement (standard plan)
- CAP project with `@sap/cds` ≥ 7.x and `@sap/credential-store` package
- Node.js ≥ 18
## 1. Create and Bind the Credential Store Service
```bash
# Create service instance
cf create-service credential-store standard my-credstore
# Bind to your application
cf bind-service my-app my-credstore
# Create a service key for admin API access
cf create-service-key my-credstore admin-key
# Retrieve credentials for API calls
cf service-key my-credstore admin-key
```
## 2. Store Credentials (REST API)
```bash
# Store a password credential
curl -X POST "https://credstore.cfapps.<region>.hana.ondemand.com/api/v1/credentials/password" \
-H "Authorization: Bearer $CREDSTORE_TOKEN" \
-H "Content-Type: application/json" \
-d '{
"name": "PAYMENT_GATEWAY",
"value": "super_secret_password",
"username": "payment_user"
}'
# Read credential back
curl "https://credstore.cfapps.<region>.hana.ondemand.com/api/v1/credentials/password/PAYMENT_GATEWAY" \
-H "Authorization: Bearer $CREDSTORE_TOKEN"
```
## 3. Retrieve Credentials in CAP
```bash
# Install the SDK
npm install @sap/credential-store
```
```javascript
const cds = require('@sap/cds')
const { CredentialStore } = require('