h0 secret

Manage agent secrets. Secrets are encrypted at rest with AES-256-GCM and injected into HTTP headers at runtime via secret_headers in the manifest.

set

h0 secret set <AGENT_ID> <NAME> <VALUE>

Set a secret for an agent. Overwrites if the name exists.

Example

h0 secret set abc123 API_KEY sk-live-xxx

list

h0 secret list <AGENT_ID>

List secret names for an agent. Values are not displayed.

Example

$ h0 secret list abc123
API_KEY
DATABASE_URL

delete

h0 secret delete <AGENT_ID> <NAME>

Remove a secret.

Example

h0 secret delete abc123 API_KEY