Secrets
Secrets are encrypted key/value bundles that are injected as environment variables at launch. Values are encrypted at rest and never shown in logs.
Create
ts secret create huggingface HF_TOKEN=hf_xxx
ts secret create database PGHOST=db.internal PGPASSWORD=$PGPASSWORD # $VAR reads from your shell
ts secret list
ts secret delete database
In the console, Secrets → Create secret offers templates for Hugging Face, AWS, Google Cloud, OpenAI, Anthropic, Weights & Biases, PostgreSQL, MongoDB and GitHub, or a custom set of keys. Keys must be valid environment variable names.
Use
ts run infer.py --gpu l40s --secret huggingface --secret database
Multiple secrets can be attached; later ones override earlier keys on conflict.