> For the complete documentation index, see [llms.txt](https://docs.p0.dev/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.p0.dev/agentic-access/credential-sources.md).

# Credential sources

Install the credential sources the P0 AI Gateway needs to create short-lived identities in your cloud accounts for MCP servers.

The [P0 Runtime Access for AI](/readme/agentic-control-plane.md) uses credential sources to create short-lived session identities in your systems. When an agent is granted access to an MCP server, the gateway uses a credential source to get an identity for that session. The identity expires when the session ends, so no agent or user holds a long-lived credential.

Each predefined MCP server uses one credential method. Install the matching credential source before you add the server. For example, the [AWS](/agentic-access/agentic-gateway/mcp-server/aws.md) requires an AWS OIDC installation in the AWS account it reaches.

Each credential source has its own page in this section. The page lists the MCP servers that need it and shows how to install it.