---
credentials:
  api_key:
    description: "Qdrant API key granting full access to every collection. Held by the applications that own data in this engine; the MCP adapter never receives it."
    algorithm: alphanumeric
    validation: "^[A-Za-z0-9]{32,}$"
    length: 48
  read_only_api_key:
    description: "Qdrant API key granting read access only. The MCP adapter presents this one, so a contract that named a write route would still be refused by the
      engine."
    algorithm: alphanumeric
    validation: "^[A-Za-z0-9]{32,}$"
    length: 48
  mcp_bearer:
    description: "Bearer an MCP client must present to the Qdrant adapter instance. Distinct from the Qdrant API key the adapter presents upstream, because authenticating
      to Qdrant says nothing about who called the adapter."
    algorithm: alphanumeric
    validation: "^[A-Za-z0-9]{32,}$"
    length: 48