Secrets

Admin-only tenant secret vault, referenced elsewhere as secret://<name>.

Secrets is admin-only. Members don’t see the page or its sidebar entry.

The Secrets screen is your tenant-scoped, encrypted secret vault. Store credentials here once and reference them everywhere else as secret://<name> — for example an MCP header value or a storage-mount credential. Plaintext is never displayed back to you after it’s saved. For the model, see Secrets.

Where secrets are used

• MCP header values — set a header to secret://<name> on the MCP Servers screen.
• Mount credentials — pick access/secret keys from the vault in the Files mount wizard.

Creating a secret

1. Open New secret

   Click New secret.

2. Name it

   Enter a name slug — this is the <name> you’ll reference as secret://<name>.

3. Optional canonical key

   Optionally set a canonical key (with suggestions) and a description.

4. Enter the value

   Paste the plaintext, using show/hide to check it. After saving, the value can’t be read back.

The table

Each row shows name, key, description, algorithm, created, and updated. Per row you can:

Action	What it does
Rotate	Replace the stored plaintext with a new value (the name stays the same, so every secret:// reference keeps working).
Delete	Remove the secret from the vault.

Related

Secrets

How the vault encrypts and resolves values.

MCP integration

Reference secrets in MCP headers.

Access control

Why this page is admin-only.