---
id: ADR-PFM-INT-018
title: Readers see everything except secrets
product_area: platform
module: integrations
revision: 1
status: proposed
design_intent: confirmed
source_sha:
  services-platform: ad3f6a6582843008ed0f5a17b131878d15829af1
  react-console: baf6dae382d6f41dce976c7f848667ccc37e076f
decision: >-
  Allow integration readers to inspect Library records without secret values. Mutation controls and service
  authorization use distinct management, credential, execution-operation and staff permissions.
constrains:
  - SCR-PFM-INT-001
  - SCR-PFM-INT-004
  - SCR-PFM-INT-006
  - SCR-PFM-INT-010
  - SCR-PFM-INT-015
  - SVC-PFM-INT-integrations
alternatives:
  - option: Require the currently unused execution-read permission.
    why_not: >-
      No current route requires it; enforcing it would alter the accepted reader experience and needs a
      product decision.
consequences:
  - A person holding only read authority does not receive mutation controls.
  - The Library shows its no-access state when entry authority is missing.
  - APIs remain authoritative even when console gates differ from their exact permissions.
origin: docs/milestones/INTG-M1-find-install-connect.md#Decisions D4 (INTG-M1 Product Accepted); OQ-PFM-INT-004
supersedes: []
---

# Readers see everything except secrets

## Context

Reader access does not confer authority to modify a record.

## Decision

Allow integration readers to inspect Library records without secret values. Mutation controls and service authorization use distinct management, credential, execution-operation and staff permissions.

## Alternatives Considered

Require the currently unused execution-read permission. No current route requires it; enforcing it would alter the accepted reader experience and needs a product decision.

## Consequences

A person holding only read authority does not receive mutation controls.

The Library shows its no-access state when entry authority is missing.

APIs remain authoritative even when console gates differ from their exact permissions.