Secrets
Secrets are an encrypted key/value vault for the API keys and tokens your tools, MCP servers and flows use — so raw credentials never sit in plaintext in your configuration. You reference a secret as {{secrets.KEY_NAME}}.
Where: left nav → Secrets (/secrets).
Add a secret
Section titled “Add a secret”- Click New Secret.
- Enter a Key in
UPPER_SNAKE_CASE(e.g.ORDERS_API_KEY) — this can’t be changed later. - Enter the Value (masked) and an optional Description.
- Save. The value is encrypted and never shown again.
Use a secret
Section titled “Use a secret”Anywhere a tool or MCP server accepts a value — URL, headers, fixed values, auth fields — use the Insert secret… picker to reference it as {{secrets.KEY_NAME}}.
Rotate or remove
Section titled “Rotate or remove”- Rotate — edit the secret and enter a new value (leave blank to keep the current one). The key itself can’t be renamed.
- Delete — permanent. Any tool referencing it will fail at runtime until you recreate a secret with the same key.
- Values are write-only by design — you can’t view an existing value, only replace it.
- Deleting a secret doesn’t clean up the tools that reference it; recreate it under the same key to restore them.