> ## Documentation Index
> Fetch the complete documentation index at: https://docs.kylon.io/llms.txt
> Use this file to discover all available pages before exploring further.

# secret

> Manage agent environment secrets.

```text theme={null}
kylon workspace secret — kylon workspace help detail

secret — manage canonical workspace secrets and agent grants
  kylon workspace secret list
  kylon workspace secret share <KEY> (--to-agent <agent_id[,agent_id...]> | --all-agents)
  kylon workspace secret unshare <KEY> (--from-agent <agent_id[,agent_id...]> | --all-agents)
  kylon workspace secret delete <KEY>
  kylon workspace secret run -- <command> [args...]

    Each key names one workspace value. Sharing adds an agent grant; it does
    not copy the value. Secret values are write-only. To add an API service, run kylon workspace connection secret add --name <name> --key <ENV_VAR[,ENV_VAR...]> --provider-url <url> [--usage <text>] once with every variable it needs; to change its keys, run kylon workspace connection secret update --connection <connection_id>. Never pass its value through a CLI command, command arguments, or chat. Use secret run inside an active Agent assignment to inject granted secrets into exactly one child command. The CLI redacts resolved values from child output.

Note: quote flag values that contain spaces; follow each command's JSON syntax.
```


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.