Secrets

A Secrets node holds key/value pairs, encrypted at rest, and passes them as-is to every app or cron job linked to it. It runs no container. Use it when several apps need the same Stripe key or signing secret: change it once, redeploy the linked apps.

• Names are letters, digits and _, not starting with a digit.
• Generate value creates a random 48-character secret.
• Reference one value from an app’s own variables with ${<secrets label>.KEY}.
• A value you set by hand on the app still wins over the Secrets node.
• After changing a secret, redeploy the apps that use it.

Who can see values depends on your role: viewers see only the names. Values are never shown to the CLI, API tokens or AI agents, and never exported.