The Vault

The Vault allows administrators to store sensitive environment variables (API keys, database credentials, tokens) that are injected into the IDE session without exposing them to developers.

Setting Up the Vault

1. Go to Workspaces → Select Project → Settings.
2. Click Vault.
3. Add key-value pairs for each secret (e.g., DATABASE_URL, API_KEY).

How It Works

• Secrets are encrypted at rest in the database.
• When a developer opens the IDE, secrets are injected as environment variables into their session.
• Developers cannot view secret values — they can only use them in code.
• Secrets are never written to the file system or logged.

Security Model

The Vault uses AES-256 encryption. Secrets are decrypted only at the moment of injection into the IDE process and are never exposed to the browser, clipboard, or any logs.