Guides

Secrets

Declare, set, and read app secrets safely.

For agents: Declare required secret names, set values through the CLI/API, and read them only from server code with ctx.secrets.

CLI

printf '%s' "$CHECKOUT_SECRET_KEY" | npm run userland -- apps secrets set "$APP_ID" CHECKOUT_SECRET_KEY

Secret values are encrypted at rest, never returned by the API, and must not be embedded in static assets.