Credentials belong in one place
Pasting the same bearer token into thirty requests works right up until it expires. Authorization in Requestly is configured once and inherited.
Set auth on the collection
Open the Authorization tab on a collection, pick the type, and fill in the credentials. Every request in that collection now sends them.
Override on a single request
Inheritance is a default, not a rule. Any request can define its own authorization, or select NO-AUTH to be sent without credentials at all.
Keep the secret in the Vault
The auth field accepts variables, which means the credential itself does not have to live in the collection. Store it in the Vault and reference it as {{vault:key}} — the reference travels with the collection, the value stays encrypted on your machine.
