Your AI agents often need credentials to interact with your tools — GitHub tokens, AWS keys, or API credentials for LLM providers. The Secret Vault ensures these are handled with enterprise-grade security.
Zero-Knowledge Architecture
Burros.AI uses a secure secret injection pattern:
- Encryption at Rest: Secrets are never stored in plain text in our database.
- Per-Task Injection: A secret is only exposed to a Burro agent at the exact moment it's needed for a specific task.
- Sanitization: Secret values are automatically scrubbed from all agent logs and chat messages.
Adding & Using Secrets
- Navigate to Settings → Secret Vault.
- Add your secret (e.g.,
DATABASE_PASSWORD). - In your Playbook or Mission Objective, simply reference the secret by name.
- The system automatically handles the secure handshake and injection into the Burro's environment.
Important: Never post your raw API keys in the chat. Always add them to the Secret Vault first and then reference them by their key name.