> For clean Markdown of any page, append .md to the page URL.
> For a complete documentation index, see https://docs.astropods.com/llms.txt.
> For AI client integration (Claude Code, Cursor, etc.), connect to the MCP server at https://docs.astropods.com/_mcp/server.

# ast secrets

Manage account secrets and plain variables. Alias: `ast secret`.

```bash
ast secrets <subcommand>
```

## secrets list

```bash
ast secrets list [--values] [--json]
```

`--values` shows values for plain (non-secret) variables.

## secrets create

```bash
ast secrets create <name> [--value <val>] [--plain] [--description <text>] [--overwrite]
```

Prompts for value when `--value` is omitted. Use `--plain` to store as a readable variable instead of an encrypted secret.

## secrets update

```bash
ast secrets update <name> [--value <val>] [--plain] [--description <text>]
```

## secrets get

```bash
ast secrets get <name> [--json]
```

## secrets delete

```bash
ast secrets delete <name>
```

## secrets import

Import variables from a file (e.g., `.env`). Blank values are skipped. Existing variables are skipped unless `--overwrite` is set.

```bash
ast secrets import --file <path> [--plain] [--plain-keys KEY1,KEY2] [--overwrite]
```

## Next steps

* [Managing secrets](/secrets): how the account vault works and how agents read from it
* [ast blueprint](/cli/blueprint): reference a secret at deploy with `--var KEY=@SECRET_NAME`