> ## Documentation Index
> Fetch the complete documentation index at: https://help.universalmint.io/llms.txt
> Use this file to discover all available pages before exploring further.

# Custodians and credentials

> Add the custodians that hold your reserve, and connect the providers that sign mints, burns, and agreements.

Before you list a token, set up the custodian that holds its backing and the credentials the platform uses to sign onchain and verify agreements.

## Custodians

**Custodians** lets you manage custodians and the asset classes they support.

**1. Add a custodian**

Open **Custodians** in your organization workspace and select **Add custodian**.

**2. Name it**

Enter a **Name**. A **Slug** is generated from it, and you can edit it. Add a **Region** if you like.

**3. Set its capabilities**

Select **Add asset** for each asset the custodian holds, for example silver, and pick the settlement methods it supports.

Custodians confirm the reserve through attestations: signed reserve statements and bar lists that you upload to the token. The platform treats attestations older than 90 days as stale, so upload a fresh one regularly.

## Credentials

**Credentials** connects the providers your tokens use. Select **Add credential** and pick a provider.

> **Signing provider: Fireblocks**
>
> Connect your Fireblocks workspace for mint and burn signing. Choose your workspace's region, enter the **API key**, and upload the matching private key file. Once a mint or burn passes approval, the platform signs and broadcasts it through this connection.

> **Agreement provider: DocuSign**
>
> Verify signed agreements through DocuSign. Register one DocuSign credential; issuance and redemption requests that require an agreement are checked against this account.

Secrets you enter are encrypted in your browser before they're sent.

To remove a credential, select **Revoke**. A token that still signs or verifies with a credential must be moved to another one first.

> [!WARNING]
>
> Only add credentials scoped to the vaults and accounts your tokens need. Rotate them in Fireblocks or DocuSign if you think they've been exposed, then revoke the old credential here.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.