Security — Advanced
How do we handle secrets in agent workflows?
Never embed secrets in prompts. Store in a secrets manager (Vault, AWS Secrets Manager); tools retrieve at invocation time using their own credentials. Log secret access but never the secret value. If a tool must pass through a secret to a downstream service, do it out-of-band from the LLM context.
Last reviewed:
More on Security — Advanced
Browse the full FAQ for 170 answers, or start a free GenAI maturity assessment to see where your organisation stands.