{"schemaVersion":"1","contentVersion":"2026-10-18.1","slug":"controls-secrets","title":"Secret controls","summary":"Add or update secrets, manage access, and find the references your workflows use.","category":"Control reference","minutes":4,"prerequisites":["Open the named screen in Rumata. Available controls may depend on your account, permissions, and resource state."],"sections":[{"id":"browse","title":"Find a secret","blocks":[{"type":"paragraph","text":"Open [System Explorer](/guides/controls-preview#navigation) → [Secrets](/guides/controls-secrets#browse). Secret values are write-only: after saving, the screen shows a protected placeholder rather than the original value."},{"type":"table","headers":["Control","What it does"],"rows":[["Search secrets","Filter by name or description. It cannot search the protected values."],["Add Secret","Open a new-secret form. A project must be selected."],["Edit pencil","Open an existing secret’s metadata and an empty field for an optional replacement value."],["Manage access","Open group-level permissions for this secret."],["Protected value display","Indicate that a value has been stored. It is not a reveal or copy-value control."]]}]},{"id":"create-edit","title":"Add or edit a secret","blocks":[{"type":"paragraph","text":"Use a recognizable name such as PAYMENT_API_KEY and a description that explains its purpose without including the credential itself."},{"type":"table","headers":["Control","What it does"],"rows":[["Name","Set the identifier when creating the secret. It is required and cannot be renamed in the edit form."],["Type","Classify the secret, for example api-key, database, auth, payment, or email. This is a text field, not a provider connection wizard."],["Description","Explain where the secret is used."],["Value","Enter the credential for a new secret, or a replacement when editing. Leave it blank during editing to keep the current value."],["Add Secret / Save","Create the secret or save your edits. If a field or server error occurs, the form shows the error instead of a success message."],["Cancel / Close","Dismiss the form without submitting the pending changes."]]}]},{"id":"delete-system","title":"Deletion and the system JWT secret","blocks":[{"type":"paragraph","text":"[Workflows](/guides/controls-workflows#list) can depend on a secret by name. Deleting one can stop those workflows from working."},{"type":"table","headers":["Control","What it does"],"rows":[["Delete secret / trash icon","Open a confirmation identifying the secret to remove."],["Delete secret in the confirmation","Permanently remove the secret from Rumata and the project runtime. This cannot be undone."],["Cancel in deletion confirmation","Keep the secret. Confirmation controls are disabled while deletion is pending."],["Copy factory JWT workflow reference","Copy the system-managed signing secret’s workflow reference. It copies a reference, not the secret value."]]}]}],"technical":[],"related":["system-explorer-secrets","controls-access","system-explorer-workflows"],"sources":["components/window/explorer/SecretsView.tsx","components/window/explorer/SecretDeletionDialog.tsx","components/window/explorer/FactoryJwtSecretCard.tsx"],"updated":"2026-09-06","audience":"general","media":[{"src":"https://docs.rumata.dev/media/manual/secrets.jpg","width":1662,"height":789,"alt":"Project Secrets showing a protected factory JWT secret and its workflow reference.","caption":"Reference capture from the separate Sabai Talk Thai application (September 8, 2026). The system-managed value stays hidden. [Workflows](/guides/controls-workflows#list) refer to the secret by its reference rather than placing its value in documentation.","sectionId":"browse"},{"src":"https://docs.rumata.dev/media/manual/new-secret.jpg","width":1662,"height":789,"alt":"Empty Add Secret form in Rumata.","caption":"Reference capture from the separate Sabai Talk Thai application (September 8, 2026). Add Secret opens a form. Review the name and value before saving; this empty form was cancelled.","sectionId":"create-edit"}],"video":null,"url":"https://docs.rumata.dev/guides/controls-secrets"}