diff --git a/docs/06-All-Credentials-Inventory.md b/docs/06-All-Credentials-Inventory.md
index 3a62c046..8758d6ed 100644
--- a/docs/06-All-Credentials-Inventory.md
+++ b/docs/06-All-Credentials-Inventory.md
@@ -188,3 +188,6 @@
 4. **The `BACKEND_JWT` and `JWT_TEST_TOKEN` are identical** — the same test JWT is used for frontend-to-backend auth and for testing.
 5. **The `GCS_SERVICE_ACCOUNT` in encoach-cms contains a full GCP service account private key** encoded in base64.
 6. **The `FIREBASE_CLIENT_EMAIL` references `tiago.ribeiro@ecrop.dev`** — a developer's email from the previous development team.
+
+
+openai_key: <REDACTED — stored in Odoo `ir.config_parameter` key `encoach_ai.openai_api_key`. Rotate at https://platform.openai.com/account/api-keys if exposed.>