Features

Secrets

Connect agents to external systems with organization- and agent-scoped secrets. Values are encrypted in Postgres; on each message the control plane decrypts and injects them into the shared agent runtime for that turn only.

• Manage organization secrets from the Secrets page (owners and admins)
• Per-agent secrets override org secrets with the same name
• Agents do not persist customer credentials in memory or workspace files
• Platform credentials (Stripe, database) remain in AWS Secrets Manager via ESO