Secrets
Manage encrypted values, version changes, and inject environment configuration into your applications.
OutRay Secrets stores application values in organization-owned vaults. Each vault has separate environments, so development, staging, and production can use the same key names without sharing values.
Values are encrypted at rest with an organization data key. Authorized dashboard and CLI operations can decrypt them to reveal, export, share, or inject them. This is managed encryption, not a claim that the dashboard server cannot access authorized values.
Run with secrets
Create a vault and supply its environment values to a child process.
CLI workflows
Select a target, set or import values, pull a file, and watch changes.
Access and tokens
Separate human roles from machine permissions and resource boundaries.
Share selected values
Create a bounded encrypted snapshot link without inviting a recipient.
Use version history to inspect changes and restore an earlier value. Use Trash and Audit for deleted resources and recorded actions.
Do not commit credentials or exported dotenv files. Runtime injection avoids creating a local secrets file, but the launched application receives plaintext environment values and can still log or expose them if written incorrectly.