--- title: Enabling AI usage at Mercari with Secure Devin Management description: Mercari's AI Security team describes how they scaled Devin Enterprise across multiple teams by building a custom Terraform provider, automated secret rotation,... canonical: https://daily.dev/posts/enabling-ai-usage-at-mercari-with-secure-devin-management-ilonj5ifn twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Enabling AI usage at Mercari with Secure Devin Management | daily.dev og:description: Mercari's AI Security team describes how they scaled Devin Enterprise across multiple teams by building a custom Terraform provider, automated secret rotation,... og:url: https://daily.dev/posts/enabling-ai-usage-at-mercari-with-secure-devin-management-ilonj5ifn og:image: https://api.daily.dev/og/posts/Ilonj5ifN.png og:image:alt: Enabling AI usage at Mercari with Secure Devin Management og:image:width: 1200 og:image:height: 630 og:locale: en --- [Mercari Engineering](https://daily.dev/sources/mercari) [Read post](https://api.daily.dev/r/Ilonj5ifN) # [Enabling AI usage at Mercari with Secure Devin Management](https://api.daily.dev/r/Ilonj5ifN "Go to post") Mercari's AI Security team describes how they scaled Devin Enterprise across multiple teams by building a custom Terraform provider, automated secret rotation, Google Cloud service account key rotation, audit log integration, and API key lifecycle management — all powered by Devin's v2 and v3 Enterprise APIs and orchestrated via GitHub Actions. The post covers specific challenges like multi-organization permission management, credential rotation across many orgs, and enforcing API key expiration that Devin doesn't natively support, along with concrete Terraform and Go implementation details. [#golang](/tags/golang "Check all #golang posts")[#terraform](/tags/terraform "Check all #terraform posts")[#devin](/tags/devin "Check all #devin posts") Aug 06•11m read time•From [engineering.mercari.com](https://api.daily.dev/r/Ilonj5ifN "engineering.mercari.com") [](https://api.daily.dev/r/Ilonj5ifN "Go to post") Table of contents [Introduction](https://api.daily.dev/r/Ilonj5ifN "Introduction")[Challenges of Enterprise Operations](https://api.daily.dev/r/Ilonj5ifN "Challenges of Enterprise Operations")[Overview of the Devin API](https://api.daily.dev/r/Ilonj5ifN "Overview of the Devin API")[1\. Custom Terraform Provider](https://api.daily.dev/r/Ilonj5ifN "1. Custom Terraform Provider")[2\. Bulk Secret Rotation](https://api.daily.dev/r/Ilonj5ifN "2. Bulk Secret Rotation")[3\. Google Cloud Service Account Key Rotation](https://api.daily.dev/r/Ilonj5ifN "3. Google Cloud Service Account Key Rotation")[4\. Integration with the Security Monitoring Platform](https://api.daily.dev/r/Ilonj5ifN "4. Integration with the Security Monitoring Platform")[5\. Periodic Invalidation of API Keys Issued by Users](https://api.daily.dev/r/Ilonj5ifN "5. Periodic Invalidation of API Keys Issued by Users")[6\. API Key Management for Internal Agent Access to Devin Wiki](https://api.daily.dev/r/Ilonj5ifN "6. API Key Management for Internal Agent Access to Devin Wiki")[CI Pipeline for Unified Orchestration](https://api.daily.dev/r/Ilonj5ifN "CI Pipeline for Unified Orchestration")[Conclusion](https://api.daily.dev/r/Ilonj5ifN "Conclusion") 346 Impressions1 Upvote Comment Bookmark Copy Share your thoughtsPost [](https://daily.dev/sources/mercari) [Mercari Engineering](https://daily.dev/sources/mercari "https://daily.dev/sources/mercari") Mercari's platform is a resource for developers and technology enthusiasts, offering insights into e... Read more 32 Followers • 371 Upvotes #### Would you recommend this post? Copy link WhatsApp Facebook X New Squad Copy linkShare with your friends 1 ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Enabling AI usage at Mercari with Secure Devin Management","url":"https://daily.dev/posts/enabling-ai-usage-at-mercari-with-secure-devin-management-ilonj5ifn","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/enabling-ai-usage-at-mercari-with-secure-devin-management-ilonj5ifn"},"datePublished":"2026-08-06T00:15:51.374Z","dateModified":"2026-08-06T00:40:39.084Z","description":"Mercari's AI Security team describes how they scaled Devin Enterprise across multiple teams by building a custom Terraform provider, automated secret rotation,...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/4577fdbd22808daf5158dcdadcf57024?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/4577fdbd22808daf5158dcdadcf57024?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"Mercari Engineering","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Mercari Engineering","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/cdde515cd83640748689d74c2d938fcf","url":"https://daily.dev/sources/mercari"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/enabling-ai-usage-at-mercari-with-secure-devin-management-ilonj5ifn","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":1},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"golang,terraform,devin","timeRequired":"PT11M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Mercari Engineering","item":"https://daily.dev/sources/mercari"},{"@type":"ListItem","position":3,"name":"Enabling AI usage at Mercari with Secure Devin Management"}]} ```