Secrets Overview

Secrets and integrations for connecting external services.

Overview

inference.sh provides two ways to give your agents access to external services:

Security

Both secrets and integrations are:

• Encrypted at rest using AES-256-GCM
• Never logged or exposed in task outputs
• Scoped to your team — other teams cannot access them
• Injected only at runtime — only to apps that require them and only to apps that are verified or user-owned

How they work with apps

Apps can declare what they need:

1secrets:2  - key: OPENAI_API_KEY3    description: For GPT-4 calls45  - key: STRIPE_SECRET_KEY6    description: For payments7    optional: true89integrations:10  - key: google.sheets11    description: Read sales data1213  - key: x.tweet.write14    description: Post updates15    optional: true

When you run the app:

1. We check if you have the required secrets and integrations
2. If something's missing, you'll be prompted to add it
3. Once satisfied, credentials are injected automatically

Managing Secrets

You can manage secrets via the web UI, CLI, or REST API:

→ Secrets API — GET/POST /secrets, create, update, reveal, delete

1# List all secrets2infsh secrets list34# Set a secret5infsh secrets set OPENAI_API_KEY sk-your-key-here67# Delete a secret8infsh secrets delete OPENAI_API_KEY

Quick Links

Secrets

Store your own API keys and credentials:

→ Environment Secrets

Integrations

Connect to external services with managed OAuth:

→ Integrations Overview

Available integrations:

• Google Service Account — Sheets, Docs, Drive
• Google OAuth — Gmail, Calendar, personal Drive
• X.com — Twitter API

Next

→ Environment Secrets