diff --git a/infrastructure-control.prose.md b/infrastructure-control.prose.md
index 87f64b7..58c21dd 100644
--- a/infrastructure-control.prose.md
+++ b/infrastructure-control.prose.md
@@ -181,8 +181,8 @@ description: >
 **Stirling-PDF** (deployed 2026-07-03, Authentik SSO 2026-07-03):
 - URL: `https://pdf.sysloggh.net` (public) / `http://192.168.68.7:8989` (direct)
 - Swagger: `http://192.168.68.7:8989/swagger-ui.html`
-- Admin credentials: `admin` / `kakashi20stirling`
-- API key: `adefaef837314afc37803747049c2e73f456da97699ff1b02b391347c4a3cb88`
+- Admin credentials: `«vault: infrastructure/production STIRLING_ADMIN_USER»` / `«vault: infrastructure/production STIRLING_ADMIN_PASSWORD»`
+- API key: `«vault: infrastructure/production STIRLING_API_KEY»`
 - Authentik OAuth2: configured but disabled (requires paid Server license). Ready to enable: set `SECURITY_OAUTH2_ENABLED=true` + `SECURITY_LOGINMETHOD=all`
 - Compose: `/opt/home_stack/docker-compose.yml`
 - Control script: `/opt/home_stack/infra-control.sh`
diff --git a/stirling-pdf-agent-access.prose.md b/stirling-pdf-agent-access.prose.md
index 672c623..e6abec5 100644
--- a/stirling-pdf-agent-access.prose.md
+++ b/stirling-pdf-agent-access.prose.md
@@ -27,7 +27,7 @@ Agent (Hermes/pi) ──curl + X-API-Key──► Stirling-PDF (:8989) ──►
 | Base URL | `http://192.168.68.7:8989` |
 | Auth Method | API Key (header) |
 | Header Name | `X-API-Key` |
-| API Key | `adefaef837314afc37803747049c2e73f456da97699ff1b02b391347c4a3cb88` |
+| API Key | `«vault: infrastructure/production STIRLING_API_KEY»` |
 | Key Source | `SECURITY_CUSTOMGLOBALAPIKEY` in `/opt/home_stack/docker-compose.yml` |
 | Swagger | `http://192.168.68.7:8989/swagger-ui.html` |
 | Health | `http://192.168.68.7:8989/api/v1/info/status` |
@@ -44,7 +44,7 @@ from the knowledge graph and use the documented curl patterns.
 Direct bash invocations:
 ```bash
 curl -X POST "http://192.168.68.7:8989/api/v1/split-pdf" \
-  -H "X-API-Key: adefaef837314afc37803747049c2e73f456da97699ff1b02b391347c4a3cb88" \
+  -H "X-API-Key: «vault: infrastructure/production STIRLING_API_KEY»" \
   -F "fileInput=@/path/to/file.pdf" \
   -F "pageNumbers=1,2,3" \
   -o /tmp/output.zip