> ## Documentation Index
> Fetch the complete documentation index at: https://docs.zeroruntime.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Secrets Management

> Inject provider keys and tokens into your deployed agent as secrets, and manage secret sets.

Secrets are environment variables, such as provider keys and tokens, injected into your
running agent. They're stored as named **secret sets**.

## Set secrets at deploy time

The simplest way is to upload your `.env` file when you deploy:

```bash theme={null}
zeroruntime up --env .env
```

This creates a secret set from the file, links it to the agent, and records it as
`secrets.env` in `zeroruntime.yaml`.

## Manage secret sets

```bash theme={null}
zeroruntime secrets list                       # all secret sets
zeroruntime secrets create my-secrets -f .env  # create a set from a file
zeroruntime secrets describe my-secrets        # show keys (values hidden)
zeroruntime secrets add my-secrets             # add keys interactively
zeroruntime secrets remove my-secrets          # remove keys interactively
zeroruntime secrets delete my-secrets          # delete the whole set
```

Omit `-f` on `create` to enter keys interactively.

<Warning>
  Changing secrets affects only new sessions. Run `zeroruntime up` to roll the change out to running
  workers.
</Warning>


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.