A ProductCredential is the service key that lets a registered product authenticate to the Suite platform for internal, server-to-server calls. The platform never stores the raw key — it keeps a keyHash plus a short keyPrefix so the credential can be recognized in logs without exposing it. Lifecycle fields track the full history: createdBy and createdAt record issuance, lastUsedAt shows recent activity, rotatedAt marks a rotation, and revokedAt with revokedBy capture revocation. The product and creator relations tie each credential back to the product it belongs to and the user who issued it.
Technical section
Data model, API, and internals — visible to developers.