Adios
← PLATFORM / Secrets & Environment Variables

Keep the config. Protect the credentials.

AI agents can easily compromise hardcoded API keys and secrets. Adios keeps your credentials safe by replacing them with secret:// references in adios.yaml. Your agent can configure environment needs without ever seeing actual production values.

Add secrets to an app ↗Read the manifest guide

IN PRACTICE

Configure a payment webhook without exposing its keys.

Commit references for the provider API key and signing secret, resolve stored values for the workload, and keep both credentials out of Git and copied manifests.

adios.yaml excerpt
env:
  PUBLIC_APP_URL: https://dashboard.example.com
  FEATURE_SEARCH: "true"
  DATABASE_URL: secret://DATABASE_URL
  STRIPE_SECRET_KEY: secret://STRIPE_SECRET_KEY

HOW IT WORKS

Keep the reference with the app and the value outside it.

Read the guide ↗
  1. 01

    Create or update the secret in Adios.

  2. 02

    Reference it in adios.yaml with secret://NAME.

  3. 03

    Deploy without putting raw values in your repository.

WHY IT BELONGS HERE

A reviewable deploy contract should not expose the credentials it references.

Raw values in .env files, manifests, screenshots, or copied commands are easy to leak and hard to rotate without touching application source.

Keep the deploy contract reviewable

Teammates can see that the app needs DATABASE_URL without seeing its value.

Change credentials without rewriting source

Manage and rotate team-scoped secrets independently from application commits.

Give values only to the path that needs them

Keep public config separate from private runtime and workflow credentials.

What’s included
  • ✓ secret:// references in runtime env config
  • ✓ CLI and workspace secret management
  • ✓ Runtime and workflow secret references
  • ✓ Works with app and workflow manifests

Keep the deploy contract visible and its credentials private.

Reference the values your app needs, manage them separately, and deploy without copying secrets into source.

Add secrets to an app ↗

CONNECTED CAPABILITIES

Keep building.

All features ↗
01 /

Runtime Security

Isolate agent code with managed gateways, non-routable internal services, and explicit resource limits. Adios automatically wraps every preview and deployment in secure runtime boundaries to prevent unauthorized outbound access.

Explore →02 /

Managed Databases

Add Postgres, pgvector, Redis, MongoDB, MySQL, or RabbitMQ to your stack with one click. Adios injects secure connection details into the workspace, allowing your AI agent to instantly leverage caches, queues, and vector storage.

Explore →03 /

Workflows & Automation

Define webhook integrations, scheduled tasks, and multi-step processes in clean, declarative YAML. Your AI agent can easily build and modify backend pipelines while you inspect every run, input, and output.

Explore →