What each value on the one-time "Your Generated Credentials" screen is for, how to use it, and where to change it later.
Generated Credentials
The first time you start AITM's Docker install, a one-time screen shows five auto-generated values. Each is stored encrypted on the server and never shown again after you dismiss the screen — write them down, or change them to your own values right away if you don't want to rely on the generated ones.
Admin token
Used to authenticate requests to AITM's /api/admin/* REST endpoints — the same endpoints the AITM UI itself calls when you perform admin actions. Pass it as the token this API expects; see AITM MCP & API for the exact request format.
Where to rotate it: Settings → AI Providers (admin-token section) inside AITM.
SSH password
Logs you into a shell inside the AITM container over SSH, using the port your install's credentials screen showed.
How to connect:
ssh <user>@<host> -p <port>Use the host/IP of the machine running your AITM Docker install, the username shown on the credentials screen, and the SSH port shown in your modal — do not assume a fixed port, it is whatever your install's screen displayed.
Where to rotate it: AITM Settings → AI Providers → SSH Access section.
Gitea admin user & Gitea admin password
Logs you into the web UI of the Gitea instance bundled with your AITM install — the Git server AITM uses to host your projects' repositories.
How to connect: open Gitea's web address in a browser (the host/IP of your AITM install, on whichever HTTP port your install exposes Gitea on) and sign in with the admin user and password from the credentials screen. For Git operations (clone, push, pull) against a repository hosted on this Gitea instance, use the SSH or HTTP(S) git-clone URL Gitea itself shows on that repository's page.
Where to rotate it: inside Gitea's own web UI, under that admin account's profile/security settings — not inside AITM.
Gitea API token
Used for programmatic access to the Gitea API (not the web UI) — for scripts or integrations that need to talk to Gitea directly rather than through AITM.
How to connect: send it as a Gitea API auth token (e.g. as the Authorization header Gitea's API documentation specifies) against your Gitea instance's API base address.
Where to rotate it: inside Gitea's own web UI, under Settings → Applications (personal access tokens) for that admin account.
Security note
All five values are generated once, shown to you a single time on that screen, and stored encrypted on the server afterward — AITM cannot show them to you again. If you don't trust auto-generated values, change each one to a value of your own choosing right away, using the rotation locations listed above.