Skip to main content
Secrets is admin-only. Members don’t see the page or its sidebar entry.
The Secrets screen is your tenant-scoped, encrypted secret vault. Store credentials here once and reference them everywhere else as secret://<name> — for example an MCP header value or a storage-mount credential. Plaintext is never displayed back to you after it’s saved. For the model, see Secrets.

​
Where secrets are used

  • MCP header values — set a header to secret://<name> on the MCP Servers screen.
  • Mount credentials — pick access/secret keys from the vault in the Files mount wizard.

​
Creating a secret

1

Open New secret

Click New secret.
2

Name it

Enter a name slug — this is the <name> you’ll reference as secret://<name>.
3

Optional canonical key

Optionally set a canonical key (with suggestions) and a description.
4

Enter the value

Paste the plaintext, using show/hide to check it. After saving, the value can’t be read back.

​
The table

Each row shows name, key, description, algorithm, created, and updated. Per row you can:

Secrets

How the vault encrypts and resolves values.

MCP integration

Reference secrets in MCP headers.

Access control

Why this page is admin-only.