Advanced Features

Secret Management (Vault)

Securely manage API keys, tokens, and credentials used by your AI agents. Learn how Burros.AI handles encryption and per-task secret injection.

Your AI agents often need credentials to interact with your tools — GitHub tokens, AWS keys, or API credentials for LLM providers. The Secret Vault ensures these are handled with enterprise-grade security.

Zero-Knowledge Architecture

Burros.AI uses a secure secret injection pattern:

  • Encryption at Rest: Secrets are never stored in plain text in our database.
  • Per-Task Injection: A secret is only exposed to a Burro agent at the exact moment it's needed for a specific task.
  • Sanitization: Secret values are automatically scrubbed from all agent logs and chat messages.

Adding & Using Secrets

  1. Navigate to Settings → Secret Vault.
  2. Add your secret (e.g., DATABASE_PASSWORD).
  3. In your Playbook or Mission Objective, simply reference the secret by name.
  4. The system automatically handles the secure handshake and injection into the Burro's environment.
Important: Never post your raw API keys in the chat. Always add them to the Secret Vault first and then reference them by their key name.