# TaxCredentialSource

A model the API reference uses in a request or a response. The operation pages link every field typed as this model here.

Whose vendor account a merchant's tax lookups are billed to.

## Values

| Value | Description |
| --- | --- |
| `Gateway` | The gateway's own provider account. The binding stores no credential of its own: the values are filled in at read time from the host-scoped provider settings, and the merchant surfaces never carry them. This is what a null credentialSource reads as, which is the safe default: a half-completed row cannot accidentally claim to hold the merchant's own contract. |
| `Merchant` | The merchant's own provider account. The binding carries the credentials, with every secret value held as ciphertext and stripped on any read that leaves the server. |

## See also

- [All documentation](https://devportal.demo.winkpg.io/llms.txt): the machine-readable index of every public page on this site.