Secrets

Tool credentials, encrypted at rest and decrypted only inside the worker. Reference one from an operation as {{secrets.NAME}} (e.g. an HTTP Authorization header). Values are write-only — they're never shown again. Saving with an existing name replaces that secret's value.