> ## Documentation Index
> Fetch the complete documentation index at: https://docs.orcapods.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Secrets

> Admin-only tenant secret vault, referenced elsewhere as secret://<name>.

<Warning>
  **Secrets is admin-only.** Members don't see the page or its sidebar entry.
</Warning>

The **Secrets** screen is your tenant-scoped, **encrypted secret vault**. Store credentials here once and reference them everywhere else as `secret://<name>` — for example an MCP header value or a storage-mount credential. **Plaintext is never displayed** back to you after it's saved. For the model, see [Secrets](/concepts/secrets).

## Where secrets are used

* **MCP header values** — set a header to `secret://<name>` on the [MCP Servers](/concepts/mcp-integration) screen.
* **Mount credentials** — pick access/secret keys from the vault in the [Files](/dashboard/files) mount wizard.

## Creating a secret

<Steps>
  <Step title="Open New secret">
    Click **New secret**.
  </Step>

  <Step title="Name it">
    Enter a **name slug** — this is the `<name>` you'll reference as `secret://<name>`.
  </Step>

  <Step title="Optional canonical key">
    Optionally set a **canonical key** (with suggestions) and a **description**.
  </Step>

  <Step title="Enter the value">
    Paste the **plaintext**, using **show/hide** to check it. After saving, the value can't be read back.
  </Step>
</Steps>

## The table

Each row shows **name**, **key**, **description**, **algorithm**, **created**, and **updated**. Per row you can:

| Action     | What it does                                                                                                           |
| ---------- | ---------------------------------------------------------------------------------------------------------------------- |
| **Rotate** | Replace the stored plaintext with a new value (the name stays the same, so every `secret://` reference keeps working). |
| **Delete** | Remove the secret from the vault.                                                                                      |

## Related

<CardGroup cols={3}>
  <Card title="Secrets" href="/concepts/secrets">
    How the vault encrypts and resolves values.
  </Card>

  <Card title="MCP integration" href="/concepts/mcp-integration">
    Reference secrets in MCP headers.
  </Card>

  <Card title="Access control" href="/concepts/access-control">
    Why this page is admin-only.
  </Card>
</CardGroup>