Secrets

Some projects use an outside service, like email sending or an AI tool. That service gives you an API key, and the project keeps that key in Secrets, out of the code and out of the chat.

The agent asks for the value

When your request needs a key, the agent shows a card in the chat: "The app needs an environment variable. Type the value and I save it for you."

1. Check the name. The agent has already filled in the Key, like RESEND_API_KEY.
2. Paste the value. Copy the key from your account on the service and paste it into the Value field.
3. Click Save. The card shows "Saved", and the agent carries on the work.

The agent never sees the value, because the card saves it straight to the project. If you don't have the key yet, click Not now. Don't paste the key in the chat: the agent reads everything you write there.

Example request:

The agent creates some secrets on its own, and they show up in the panel's list.

Secret or public

In the card and in the panel, the Kind field decides who sees the value.

• Secret. Only the app uses the value, and nobody reads it back, not you and not the agent. Use it for passwords and API keys.
• Public. Anyone who opens the app can see the value. Use it for addresses and IDs, never for sensitive information.

The agent proposes the kind, and you can change it before saving.

Preview and production

The Environment field decides where the value applies: Preview, Production or All, which covers both.

• In the preview. The project starts using the new value within a few seconds, with nothing for you to do.
• In the live app. The new value goes in when you publish again.

A test key in Preview and the real key in Production let you test without touching what's already selling.

Add, replace and delete

The project's secrets live in the Secrets panel. Each row shows the key, the environment and the kind. Only the Owner and Editors add and delete. A Reader only sees the list.

1. Open the Secrets panel. Click Add secret.
2. Fill in the form. Pick the Kind, type the Key and the Value, and pick the Environment.
3. Click Save.

A secret can't be edited, and a replaced value doesn't come back. To replace the value, add the same key in the same environment, and the new value replaces the old one.

Deleting can't be undone. To remove a secret, click Delete on its row and confirm. A row marked Managed by Connection comes from a service linked to the project and can't be removed here.