Basics
Secrets
Encrypted storage for API keys and backend configuration, available to your edge functions.
Secrets store API keys and other sensitive values for your backend, encrypted at rest. Edge functions read them as environment variables; they are never exposed to client-side code.
Working with secrets
- Add a secret with a name like OPENAI_API_KEY and its value. Values are masked in the list.
- Reveal shows a secret's current value on demand, where you can also update it.
- Deleting a secret is permanent; its value cannot be recovered.
Names starting with VITE_, EXPO_PUBLIC_, or NEXT_PUBLIC_ are client-side environment variables and are rejected here. Those belong in the app's .env in the workspace; anything in a backend secret must stay server-side.
Secrets starting with SUPABASE_ are provisioned and rotated by Startbase Cloud. They show a "Managed by Startbase" badge and cannot be edited or deleted.