> ## Documentation Index
> Fetch the complete documentation index at: https://docs.tryprofound.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Create and manage secrets

> Add API keys and credentials to Secret Manager and use them in Agents, Sheets, and Aim

Secret Manager stores the API keys and credentials your Agents, Workflows, Sheets, and AI Marketer (Aim) use. For how scopes and visibility work, see [How Secret Manager works](https://docs.tryprofound.com/platform-config/secret-manager/overview.md).

## Create a secret

**1. Open Secret Manager**

Select your organization name at the top left of the platform, then select **Settings**. Select **Secret Manager** under **Organization** in the left navigation sidebar.

**2. Add the secret**

Select **Add secret**. Under **Scope**, choose **Organization** to share the secret with every member of your organization, or **Personal** to keep it to yourself.

**3. Enter the name and value**

Enter a **Name** that describes what the secret is for, for example `CMS_API_KEY`. This is the name you identify the secret by in Agents, Aim, and other places in Profound. Paste the credential into **Value**, then select **Create secret**.

> [!TIP]
>
> Give secrets names that say which service and environment they belong to, such as `CRM_PROD_TOKEN`. Teammates choose organization secrets by name, since they can't see the value.

## View, change, or delete secrets

Secret Manager has two tabs: **Organization** lists the secrets shared with your whole organization, and **Personal** lists your own. Search a tab with **Search secrets**. Each row shows the secret's name, its masked value, who last updated it, and when.

To reveal a value, select the eye icon in the **Value** column. The icon is active only on secrets you created, so other members' values stay hidden.

To change or delete a secret, open the **...** action menu at the end of its row. Only the person who created a secret can edit, delete, or reveal it, so these actions are disabled on other members' secrets.

## Use a secret in an Agent, Workflow, or Sheet

Agents, Workflows, and Sheets all take a secret through a **Profound Secret** input. You add the input once, reference it where the credential is needed, and pick the secret at run time, so the value is never stored in the Agent, Workflow, or Sheet itself.

1. Add a **Profound Secret** input. In the Agent Builder or the Workflow Builder's **Start** block, select **Add input**, set **Type** to **Profound Secret**, enter a **Label**, then select **Add input**. In a [Sheet](https://docs.tryprofound.com/sheets/getting-started.md), add a column of the **Profound Secret** type instead.
2. Reference the input in the node or tool that needs the credential. For example, in a [Call API](https://docs.tryprofound.com/agents/workflows/nodes/call-api.md) node, open **Advanced settings**, set **Authentication Type** to **API Key**, and insert the secret input in **API Key Value**.
3. Pick the secret when you run it. When you test or run an Agent or Workflow, open the secret input and choose **Select a secret**. In a Sheet, choose **Select a secret** in each row, so a Workflow column that runs on the row can use different credentials per row.

## Use a secret in Aim

When Aim needs a credential in a chat, it shows a **Secure input** form with the fields it needs. Fill in the fields, then choose one of the following:

* **Save**: store the credential so Aim can reuse it later.
* **Provide once**: use the credential for this request without saving it.

When Aim needs a saved secret, it asks for permission and names the secret. Select **Allow** to let it use the secret, or **Deny** to stop it.