Skip to main content
Use Secrets to securely store sensitive information like passwords and API keys. Use Secrets for all third-party API keys.
Secrets management

​
How do I add a secret?

  1. Go to Secrets in the sidebar
  2. Enter a name (like TWILIO_API_KEY)
  3. Enter the value
  4. Click Add Secret

​
How do I use secrets in my app?

Hercules will automatically uses your secrets when building features:
  • “Send emails with SendGrid” uses your SENDGRID_API_KEY
  • “Send SMS with Twilio” uses your TWILIO_API_KEY
Secrets are referenced in code with process.env.SECRET_NAME

​
Can I view/edit a secret after creating it?

No. Secrets are write-once. Once created, you can see the secret name but can’t see or edit the value. To change a secret, delete it and create a new one with the updated value.

​
Can Hercules AI see my secrets?

Hercules AI can see your secret names but not values. This lets it reference the correct secret when building features without exposing sensitive data.

​
Additional FAQ

Hercules includes some predefined secrets for internal functionality (Hercules API keys, auth/OIDC tokens). These are marked as protected and you can’t edit or delete them.
Coming soon. Multiple environments (dev vs prod) with different secrets per environment are planned. Currently, all secrets apply to your single environment.
Immediately delete the old secret (in Hercules and the third-party) and create a new one with the fresh key.
Secrets are encrypted at rest and never appear in your code or logs.