DevOpsPadDownload

Security & privacy

How DevOpsPad stores credentials in the OS keychain, what its read-only modes do and do not block, and how to set up least-privilege accounts.

  • How DevOpsPad stores passwords and keys

    Database passwords, SSH secrets and AI API keys live in the OS keychain. Connection metadata is a local JSON file with owner-only permissions.

  • What is read-only in DevOpsPad

    How each engine keeps DevOpsPad queries read-only, where the protection has gaps such as MySQL DDL, and which Infra console actions are allowed to write.

  • Create least-privilege accounts

    Create read-only accounts for MySQL, ClickHouse, MongoDB, Redis, Kafka and Kubernetes so DevOpsPad can browse everything it needs and change nothing.