en How to Store and Reference a Secret

How to Store and Reference a Secret

Keep credentials out of server configuration fields by storing them once and referencing them by name.

Steps

1. Go to Secrets → New Secret.

   Open the Secrets vault before defining a reusable credential.

   

   Start the New secret wizard used to store the value once.

   

2. Name it (for example, STRIPE_API_KEY) and enter its value.

   Define the name that will appear inside the secret reference.

   

3. In any field that accepts a secret — upstream authentication, headers, query parameters — reference it as {{secret:NAME}} instead of pasting the raw value.

   Record the intended use so the secret is recognizable later.

   

   Continue to the protected value step.

   

   Enter a masked documentation value to demonstrate secure storage.

   

4. Save.

   Review the generated {{secret:SCREENSHOT_API_KEY}} syntax used by server fields, without saving the temporary secret.

   

Confirm it worked

The field shows the {{secret:NAME}} reference rather than the raw value. Arthur resolves it at request time; the value itself never appears in list or detail views.

Good to know

• Revealing a stored value later is a separate action from just seeing that the secret exists — make sure whoever needs to copy a value has that capability.

Related

• Secrets and Authentication
• Roles and Permissions