> ## Documentation Index
> Fetch the complete documentation index at: https://docs.poly.ai/llms.txt
> Use this file to discover all available pages before exploring further.

<AgentInstructions>

## Submitting Feedback

If you encounter incorrect, outdated, or confusing documentation on this page, submit feedback:

POST https://docs.poly.ai/feedback

```json
{
  "path": "/secrets/introduction",
  "feedback": "Description of the issue"
}
```

Only submit feedback when you have something specific and actionable to report.

</AgentInstructions>

# Overview

> Store API keys and credentials securely in the Secrets Vault.

Store API keys, tokens, and credentials securely. Your agent's [tools](/tools/introduction) retrieve them at runtime – no hardcoded secrets in code, logs, or version history.

<Info>
  Secrets are managed at the **account level**, not inside individual agents. Access the Secrets Vault from the **Secrets** tab in the top bar of the workspace homepage.
</Info>

<Note>
  The Secrets tab is only visible to **workspace admins** on supported workspaces. If you are an admin and the tab is not visible in your workspace, the Secrets Vault may not be enabled for your account yet — [contact PolyAI support](/learn/maintain/common-issues) to request access.
</Note>

<img src="https://mintcdn.com/polyai/OH_R_DQa5l7eLASo/images/secrets/secrets-vault-overview.png?fit=max&auto=format&n=OH_R_DQa5l7eLASo&q=85&s=72d15382d6a5e20c7c84297892f7f1d2" alt="Secrets Vault overview" width="3014" height="768" data-path="images/secrets/secrets-vault-overview.png" />

## How it works

1. You [create a secret](/secrets/how-to-setup) in the Secrets Vault with a name, optional description, and value.
2. You [grant access](/secrets/how-to-access-control) to specific agents.
3. Functions retrieve the secret at runtime using `conv.utils.get_secret("secret_name")`.

```python theme={"theme":{"light":"github-light","dark":"github-dark"}}
api_key = conv.utils.get_secret("stripe_api_key")
response = requests.get(url, headers={"Authorization": f"Bearer {api_key}"})
```

## Storage formats

Secrets can be stored as:

* **Single value** – A plain string (e.g., an API key).
* **Key/value pairs** – A dictionary of related credentials (e.g., `client_id` and `client_secret`).

## Next steps

<CardGroup cols={3}>
  <Card title="Create a secret" icon="plus" href="/secrets/how-to-setup">
    Add a new secret to the Secrets Vault.
  </Card>

  <Card title="Manage access control" icon="shield-halved" href="/secrets/how-to-access-control">
    Grant secrets to specific agents.
  </Card>

  <Card title="Use in functions" icon="code" href="/secrets/how-to-setup#using-secrets-in-functions">
    Retrieve secrets at runtime in your code.
  </Card>
</CardGroup>