From 6e0b67a2fde8ac6e196c8dfc0fe34c83f1dede6b Mon Sep 17 00:00:00 2001
From: Peter Steinberger <steipete@gmail.com>
Date: Sat, 28 Mar 2026 20:59:11 +0000
Subject: [PATCH] docs(secrets): sync credential surface matrix

---
 docs/reference/secretref-credential-surface.md             | 1 +
 .../secretref-user-supplied-credentials-matrix.json        | 7 +++++++
 2 files changed, 8 insertions(+)

diff --git a/docs/reference/secretref-credential-surface.md b/docs/reference/secretref-credential-surface.md
index 0719b1dc202..b374cf4cf0e 100644
--- a/docs/reference/secretref-credential-surface.md
+++ b/docs/reference/secretref-credential-surface.md
@@ -44,6 +44,7 @@ Scope intent:
 - `tools.web.search.kimi.apiKey`
 - `tools.web.search.perplexity.apiKey`
 - `tools.web.x_search.apiKey`
+- `tools.code_execution.apiKey`
 - `gateway.auth.password`
 - `gateway.auth.token`
 - `gateway.remote.token`
diff --git a/docs/reference/secretref-user-supplied-credentials-matrix.json b/docs/reference/secretref-user-supplied-credentials-matrix.json
index 1ba32e9889c..9cebf322012 100644
--- a/docs/reference/secretref-user-supplied-credentials-matrix.json
+++ b/docs/reference/secretref-user-supplied-credentials-matrix.json
@@ -508,6 +508,13 @@
       "secretShape": "secret_input",
       "optIn": true
     },
+    {
+      "id": "tools.code_execution.apiKey",
+      "configFile": "openclaw.json",
+      "path": "tools.code_execution.apiKey",
+      "secretShape": "secret_input",
+      "optIn": true
+    },
     {
       "id": "tools.web.fetch.firecrawl.apiKey",
       "configFile": "openclaw.json",