Skip to navigation
Secrets

Overview

Store API keys, tokens, and credentials securely. Your agent’s tools retrieve them at runtime – no hardcoded secrets in code, logs, or version history.

Secrets are managed at the account level, not inside individual agents. Access the Secrets Vault from the Secrets tab in the top bar of the workspace homepage.

The Secrets tab is only visible to workspace admins on supported workspaces. If you are an admin and the tab is not visible in your workspace, the Secrets Vault may not be enabled for your account yet — contact PolyAI support to request access.

Secrets Vault overview

How it works

  1. You create a secret in the Secrets Vault with a name, optional description, and value.
  2. You grant access to specific agents.
  3. Functions retrieve the secret at runtime using conv.utils.get_secret("secret_name").
api_key = conv.utils.get_secret("stripe_api_key")
response = requests.get(url, headers={"Authorization": f"Bearer {api_key}"})

Storage formats

Secrets can be stored as:

  • Single value – A plain string (e.g., an API key).
  • Key/value pairs – A dictionary of related credentials (e.g., client_id and client_secret).

Next steps

Create a secret

Add a new secret to the Secrets Vault.

Manage access control

Grant secrets to specific agents.

Use in functions

Retrieve secrets at runtime in your code.