# How To Review Connector Credential Access With BetterShield?

Review where WordPress AI connector credentials are stored and how broadly active plugin code can read them.

In **[BetterShield](/)**, open **BetterShield › Agents › Agent surface › Connector credentials** on WordPress 7.0 or newer.

## What it does

The table reports supported connectors, whether a credential is configured, where it comes from, and the number of active plugins that can read it in process. It never returns the credential itself. Database values are settings, and environment variables or PHP constants are readable by code running on the site. WordPress does not isolate them per plugin.

<span id="set-it-up" aria-hidden="true"></span>

## Step 1: Review Connector Credential Access

There is no BetterShield setting. Configure connectors through WordPress or their owning plugin, then reload the Surface.

<figure class="doc-shot">
  <img src="/docs/screenshots/connector-credentials.png" alt="Connector credentials table listing Anthropic, Google, OpenAI, and Akismet with their current state." width="1960" height="230" loading="lazy" decoding="async">
  <figcaption>The table reports credential state and exposure without displaying a key.</figcaption>
</figure>

## Recommended settings

Keep only necessary, trusted plugins active on a site that stores connector keys. Prefer restricted provider keys and rotate a key after suspected exposure.

## What it can break and how to undo

The report is read-only. Removing or rotating a connector key can stop AI features that use it. Update the connector configuration with the replacement key.

<span id="check-it-is-working" aria-hidden="true"></span>

## Final Outcome

The configured state should match the connector's own screen. The table should show only masked state and metadata, never the secret value.

<figure class="doc-shot">
  <img src="/docs/screenshots/connector-credentials.png" alt="Connector credentials table listing Anthropic, Google, OpenAI, and Akismet with their current state." width="1960" height="230" loading="lazy" decoding="async">
  <figcaption>Example Connector credentials view. Check the saved values and status on your own site.</figcaption>
</figure>

## Related

- [Review abilities registered on this site](/docs/registered-agent-abilities/)
- [Ask for a plain-language audit explanation](/docs/explain-an-audit/)
- [What BetterShield contacts](/docs/what-bettershield-contacts/)

This is how you can review connector credential access with BetterShield.

Getting Stuck? Feel free to contact our [Dedicated Support Team](/support/).