Skip to main content

Managing Secrets

Tokens are secure credentials used by services, integrations, and applications to authenticate with external systems or internal APIs.

You can manage tokens from the Tokens page in your workspace.

Step 1: Open the Tokens Page​

  1. In your workspace sidebar, click Tokens.
  2. Select the Tokens tab.

Tokens page showing token management table and create button

This tab displays all tokens configured in your workspace.

From here you can:

  • Create new tokens
  • Edit existing tokens
  • Revoke tokens
  • Delete tokens

Step 2: Create a Token​

  1. Click Create Token.
  2. A configuration modal will appear.

Create token modal showing token configuration fields

You will need to fill in the following fields.

FieldDescription
Token KeyThe identifier used to reference the token
Token ValueThe secret value of the token
DescriptionOptional explanation of what the token is used for
TypeThe token category
ExpiryWhen the token expires
ScopeProducts and apps allowed to use the token
EnvironmentThe environments where the token is valid

Step 3: Select the Token Type​

Choose the token category that best matches your use case.

Available types include:

  • Credential
  • API Key
  • Bearer Token
  • OAuth Token

Token type dropdown showing available token categories

Step 4: Set Expiry​

You can optionally configure token expiration.

FieldDescription
Expiry DateWhen the token becomes invalid
PeriodToken lifespan duration

If both fields are left empty, the token will never expire.

Tip: Use expirations for temporary integrations or testing environments.

Step 5: Define Token Scope​

Scopes determine which resources can use the token.

You can define:

  • Products
  • Apps

Token scope configuration selecting products and apps

This ensures tokens are only accessible where they are needed.

Step 6: Choose Environments​

Select which environments the token should be valid for.

Examples include:

  • Production
  • Sandbox

Environment selector showing production and sandbox options

Step 7: Save the Token​

Once all fields are configured:

  1. Click Create Token.
  2. The token will appear in the tokens table.

Tokens table showing created tokens with actions for edit, revoke, and delete

From there you can:

  • Edit the token
  • Revoke access
  • Delete it permanently

Warning: Revoking or deleting a token will immediately break any services currently using it.

Step 8: Referencing Tokens in Configurations​

You can reference tokens directly in your product configurations using the $Secret{KEY} syntax.

Simply copy the $Secret notation and replace the key with the token identifier.

Example:


$Secret{PAYMENT_API_KEY}
$Secret{STRIPE_SECRET}
$Secret{INTERNAL_SERVICE_TOKEN}

This allows your applications to securely access token values without exposing the raw credential in configuration files or code.

Important: The actual token value is never exposed in plaintext. The platform resolves the $Secret{KEY} reference securely at runtime.

Next Steps​