---
title: "Secrets management"
canonical: "https://canmyagentuse.com/features/secrets-management"
contentKind: "feature"
locale: "en"
description: "Store and provide credentials to product tools or execution environments through a documented secrets feature."
llmSummary: "Secrets management is a documented product facility for storing credentials and providing them to tools or execution environments; plain-text configuration is not a secrets manager."
publishedAt: "2026-08-28T00:00:00.000Z"
updatedAt: "2026-08-28T00:00:00.000Z"
verifiedAt: "2026-08-28"
tags: ["security","secrets","credentials","redaction"]
---

# Secrets management

Secrets management is a documented product facility for storing credentials and providing them to tools or execution environments; plain-text configuration is not a secrets manager.

- HTML: https://canmyagentuse.com/features/secrets-management
- JSON: https://canmyagentuse.com/api/v1/features/secrets-management.json
- Markdown: https://canmyagentuse.com/features/secrets-management.md

Terminology basis: **Common product term** — https://docs.github.com/en/actions/reference/security/secrets.

## Current support at a glance

Secrets management: 4 supported, 0 partial, 0 unsupported, 27 unreviewed across 31 cataloged products.

- Reviewed current products: 4 of 31
- Supported: 4
- Partial: 0
- Unsupported: 0
- Unreviewed: 27
- Not applicable: 0

Unknown or unreviewed means insufficient published evidence; it does not mean unsupported.

This row asks how a harness handles credentials used by tools, connectors, repositories, terminals, MCP servers, and sub-agents. Plain environment variables or pasted API keys are not equivalent to a managed secret that can be injected without revealing its value to model context or logs.

Evidence should record storage boundary, encryption, user and workspace scope, tool allowlists, just-in-time grants, masking, rotation, revocation, export prevention, prompt-injection defenses, child-agent inheritance, and audit events. Redaction is best-effort unless the documented mechanism prevents the model from receiving the value in the first place.

## Catalog context

- Category: [security-privacy](/categories/security-privacy.md)
- Terminology basis: Common product term
- Aliases: credential vault, secret redaction, environment secrets
- Family: [Security and privacy](/features/data-security-controls.md)
- Siblings: [Audit logs](/features/audit-logs.md), [Data residency](/features/data-residency.md), [Data retention controls](/features/data-retention-controls.md), [Encryption key management](/features/encryption-key-controls.md), [Offline operation](/features/local-only-mode.md), [Organization policy controls](/features/admin-policy-controls.md), [Training data controls](/features/training-data-controls.md)

## Compatibility assertions

Unknown means insufficient published evidence; it does not mean unsupported.

### ChatGPT (web)

- Harness: [ChatGPT](/harnesses/chatgpt-web.md)
- current: **Unknown**
- preview: **Unknown**

### Claude (web)

- Harness: [Claude](/harnesses/claude-web.md)
- current: **Unknown**
- preview: **Unknown**

### Gemini (web)

- Harness: [Gemini](/harnesses/gemini-web.md)
- current: **Unknown**
- preview: **Unknown**

### Copilot (web)

- Harness: [Copilot](/harnesses/copilot-web.md)
- current: **Supported**
  - Target: hosted-observation — 2026-08-28 Copilot cloud-agent secrets documentation observation; observed 2026-08-28
  - Environment: enterprise-managed
  - Constraint (policy): dedicated Agents secrets can be scoped to a repository or organization, with all, private, or selected repository access for organization values
  - Constraint (runtime): values are injected as environment variables and masked in session logs; COPILOT_MCP_-prefixed values are exposed only to MCP servers
  - Constraint (policy): the cloud agent cannot access Actions, Codespaces, or Dependabot secrets and variables
  - Evidence: [GitHub Docs — Configure secrets and variables for Copilot cloud agent](https://docs.github.com/en/enterprise-cloud@latest/copilot/how-tos/copilot-on-github/customize-copilot/customize-cloud-agent/configure-secrets-and-variables) — documented; observed 2026-08-28
  - Qualification note 2: Evidence checked 2026-08-28: GitHub Copilot cloud agent has dedicated Agents secrets at repository and organization scope, repository allowlists for organization secrets, masked session logs, and an MCP-only prefix that withholds designated values from the general agent environment. It cannot access Actions, Codespaces, or Dependabot secrets.
- preview: **Unknown**

### Grok (web)

- Harness: [Grok](/harnesses/grok-web.md)
- current: **Unknown**
- preview: **Unknown**

### Grok Bot (desktop)

- Harness: [Grok Bot](/harnesses/grok-bot-desktop.md)
- current: **Unknown**

### Perplexity (web)

- Harness: [Perplexity](/harnesses/perplexity-web.md)
- current: **Unknown**
- preview: **Unknown**

### Le Chat (web)

- Harness: [Le Chat](/harnesses/le-chat.md)
- current: **Unknown**
- preview: **Unknown**

### Devin (web)

- Harness: [Devin](/harnesses/devin-web.md)
- current: **Supported**
  - Target: hosted-observation — 2026-08-28 Devin secrets documentation observation; observed 2026-08-28
  - Environment: hosted-default
  - Constraint (policy): encrypted-at-rest secrets support organization-wide, personal, repository, and session scope; global values are usable by all organization members but viewable and editable only by admins
  - Constraint (format): supported credential forms include raw values, site cookies, and TOTP material
  - Constraint (runtime): configured values are injected as environment variables for sessions created after configuration, so Devin and executed code can access them
  - Evidence: [Devin Docs — Secrets and site cookies](https://docs.devin.ai/product-guides/secrets) — documented; observed 2026-08-28
  - Qualification note 3: Evidence checked 2026-08-28: Devin encrypts global secrets at rest and supports organization, personal, repository, and session scopes, including raw credentials, site cookies, and TOTP material. Organization members can use global secrets while only admins can view or edit them; environment injection means Devin or executed code can access the value.
- preview: **Unknown**

### Replit Agent (web)

- Harness: [Replit Agent](/harnesses/replit-agent.md)
- current: **Supported**
  - Target: hosted-observation — 2026-08-28 Replit Secrets documentation observation; observed 2026-08-28
  - Environment: hosted-default
  - Constraint (policy): app-scoped and account-scoped secrets are encrypted with AES-256 at rest and TLS in transit and can be linked to selected Replit Apps
  - Constraint (runtime): values are supplied to the app and Agent execution environment as environment variables; static deployments are excluded
  - Constraint (policy): collaborators and non-owner organization members may be unable to reveal a value in the UI yet can still access it by printing the environment variable
  - Evidence: [Replit Docs — Secrets](https://docs.replit.com/core-concepts/project-editor/app-setup/secrets) — documented; observed 2026-08-28
  - Qualification note 4: Evidence checked 2026-08-28: Replit's Secrets tool encrypts app and account secrets with AES-256 at rest and TLS in transit and exposes linked values as environment variables to the app and Agent execution environment. Collaborators and non-owner organization members may still recover values by printing environment variables, which is an important disclosure boundary.
- preview: **Unknown**

### ChatGPT (desktop)

- Harness: [ChatGPT](/harnesses/chatgpt-desktop.md)
- current: **Unknown**
- preview: **Unknown**

### Claude (desktop)

- Harness: [Claude](/harnesses/claude-desktop.md)
- current: **Unknown**
- preview: **Unknown**

### Cursor (desktop)

- Harness: [Cursor](/harnesses/cursor.md)
- current: **Supported**
  - Target: hosted-observation — 2026-08-28 Cursor Background Agent secrets documentation observation; observed 2026-08-28
  - Environment: hosted-default
  - Constraint (runtime): development-environment secrets are stored encrypted at rest using KMS and injected into the remote Background Agent environment
  - Constraint (policy): per-tool access controls, log masking, rotation, and prevention of model or shell access to injected values are not established by the reviewed page
  - Evidence: [Cursor Docs — Background Agents](https://docs.cursor.com/background-agent) — documented; observed 2026-08-28
  - Qualification note 1: Evidence checked 2026-08-28: Cursor Background Agents accept development-environment secrets, store them encrypted at rest with KMS, and inject them into the remote agent environment. The reviewed page does not document per-tool allowlists, masking behavior, or a guarantee that the model cannot read an injected value.
- preview: **Unknown**

### OpenWork Desktop (desktop)

- Harness: [OpenWork Desktop](/harnesses/openwork-desktop.md)
- current: **Unknown**

### Copilot Chat (desktop)

- Harness: [Copilot Chat](/harnesses/vscode-copilot.md)
- current: **Unknown**
- preview: **Unknown**

### Chrome WebMCP origin trial (desktop)

- Harness: [Chrome WebMCP origin trial](/harnesses/chrome-webmcp-preview.md)
- current: **Unknown**

### Windsurf (desktop)

- Harness: [Windsurf](/harnesses/windsurf.md)
- current: **Unknown**
- preview: **Unknown**

### Zed Agent (desktop)

- Harness: [Zed Agent](/harnesses/zed-agent.md)
- current: **Unknown**
- preview: **Unknown**

### Continue (desktop)

- Harness: [Continue](/harnesses/continue.md)
- current: **Unknown**
- preview: **Unknown**

### Cline (desktop)

- Harness: [Cline](/harnesses/cline.md)
- current: **Unknown**
- preview: **Unknown**

### JetBrains AI (desktop)

- Harness: [JetBrains AI](/harnesses/jetbrains-ai.md)
- current: **Unknown**
- preview: **Unknown**

### Warp (desktop)

- Harness: [Warp](/harnesses/warp.md)
- current: **Unknown**
- preview: **Unknown**

### Claude CLI (cli)

- Harness: [Claude CLI](/harnesses/claude-cli.md)
- current: **Unknown**
- preview: **Unknown**

### ChatGPT CLI (cli)

- Harness: [ChatGPT CLI](/harnesses/chatgpt-cli.md)
- current: **Unknown**
- preview: **Unknown**

### Codex CLI (cli)

- Harness: [Codex CLI](/harnesses/codex-cli.md)
- current: **Unknown**
- preview: **Unknown**

### OpenCode (cli)

- Harness: [OpenCode](/harnesses/opencode.md)
- current: **Unknown**
- preview: **Unknown**

### Gemini CLI (cli)

- Harness: [Gemini CLI](/harnesses/gemini-cli.md)
- current: **Unknown**
- preview: **Unknown**

### Aider (cli)

- Harness: [Aider](/harnesses/aider.md)
- current: **Unknown**
- preview: **Unknown**

### Goose (cli)

- Harness: [Goose](/harnesses/goose.md)
- current: **Unknown**
- preview: **Unknown**

### Copilot CLI (cli)

- Harness: [Copilot CLI](/harnesses/copilot-cli.md)
- current: **Unknown**
- preview: **Unknown**

### Amp (cli)

- Harness: [Amp](/harnesses/amp-cli.md)
- current: **Unknown**
- preview: **Unknown**