Workspace secrets

Create or update a secret

Runtime usage

Reference secrets inside action, agent, or browser inputs with secret://your.secret.name. Webhook triggers can also use a secret name for HMAC verification.

{
  "apiKey": "secret://openai.api_key",
  "webhook": {
    "signatureSecretName": "incoming.github.secret"
  },
  "connector": {
    "authHeader": "Authorization",
    "authSecretRef": "secret://github.token"
  }
}