prox secret

Secrets are stored in the platform's secret store (Azure Key Vault, AWS Secrets Manager, or HashiCorp Vault depending on your deployment). Agents and toolboxes reference secrets by ID — never by value.

Commands

secret set

prox secret set azure-openai-key --value $AZURE_OPENAI_KEY

secret list

prox secret list
# ID                    CREATED
# azure-openai-key      2024-11-01
# snowflake-conn        2024-11-03

secret delete

prox secret delete azure-openai-key --confirm

secret rotate

prox secret rotate azure-openai-key --value $NEW_KEY
⚠

Secret values are write-only. They cannot be read back through the CLI after creation.