Choose a Jenkins Secret file containing the downloaded Monitor credential JSON. Use Check only for checks and Sync only for deployment synchronization. The job, agent and HTTPS API origin must be approved in Manage Jenkins → System → Awarely Scan. Local scans do not read this credential. Preflight can validate format and access, but cannot verify server-side scope, expiry or revocation without a real API operation.