Secrets and keys
Sometimes your app needs to connect to an external service — a payment gateway, email service, an API. These services give you a "key" that must stay secret. codeyy's secrets system keeps these keys safe.
What is a secret?
A secret is a sensitive value your app needs to function but must be kept hidden from visitors and from published code. Common examples: a payment gateway key, an email service key, an access token for an external API.
How to add them safely
Your secrets are stored encrypted, injected into your app only when needed, and never exposed in code or logs. When the assistant needs a secret to complete a feature (like connecting a payment gateway), it will ask you through a masked secure field — you enter the value and the secret is stored encrypted without passing through the conversation.
Don't put the secret in the chat directly
Avoid pasting secret keys directly into regular chat text. Always use the dedicated masked secret field or the secrets panel to enter them safely.
Managing your secrets
You can review your project's secrets and add or update them from the secrets panel in your workspace. The values themselves stay hidden — you see that the secret exists, not its content.