How it worksFeaturesDocsEarly accessGitHubDashboard

How to Store and Reference a Secret

Keep credentials out of server configuration fields by storing them once and referencing them by name.

Steps

  1. Go to Secrets → New Secret.

    Open the Secrets vault before defining a reusable credential

    Start the New secret wizard used to store the value once

  2. Name it (for example, STRIPE_API_KEY) and enter its value.

    Define the name that will appear inside the secret reference

  3. In any field that accepts a secret — upstream authentication, headers, query parameters — reference it as {{secret:NAME}} instead of pasting the raw value.

    Record the intended use so the secret is recognizable later

    Continue to the protected value step

    Enter a masked documentation value to demonstrate secure storage

  4. Save.

    Review the generated {{secret:SCREENSHOTAPIKEY}} syntax used by server fields, without saving the temporary secret

Confirm it worked

The field shows the {{secret:NAME}} reference rather than the raw value. Arthur resolves it at request time; the value itself never appears in list or detail views.

Good to know

  • Revealing a stored value later is a separate action from just seeing that the secret exists — make sure whoever needs to copy a value has that capability.

Related

Tutorial video