Secrets are a secure way to store sensitive values (API keys, tokens, passwords) that scripts can reference without exposing the raw value. (Secrets must be enabled on the instance.)
Adding a secret#
Create a secret by specifying a key name and its value. The value is encrypted at rest and is never displayed in the UI again after you save it.
Using secrets in scripts#
Reference a secret by its key name in your scripts. The runtime injects the decrypted value only at execution time, keeping credentials out of your source code.
Updating and deleting#
You can update a secret’s value or delete it from the secrets page. The key name is fixed once created; an updated value takes effect the next time a script that uses it runs.
Tips#
- Use a clear, stable key name — scripts reference secrets by key, so renaming would mean editing every script.
- Before deleting a secret, make sure no active script depends on it.