Get started with secrets

Secrets store credentials that your Browserbase workloads need at runtime. Use the Browse CLI to create and update encrypted values. Use the CLI or a Browserbase SDK to inspect and delete them.

When you call the Secrets API or a Browserbase SDK directly, encrypt values locally before creating or updating a secret. Fetch the project keypair, seal the value with its public key, and send the resulting sealedSecretValue and keypairId. The Browse CLI performs these steps for you.

Use a secret in a Function

Attach a secret to a Function, then read it from context.secrets.

Create a secret

Install the Browse CLI

Install or update the CLI:

npm install --global browse@latest

Set your Browserbase API key

Export your API key in the terminal that runs the Browse CLI:

export BROWSERBASE_API_KEY="your_api_key"

Browserbase resolves the project from this API key. You don’t need a Project ID.

Create the secret

Choose the name that your workload will use, then run:

browse cloud secrets create SERVICE_TOKEN

When Secret value: appears, paste the secret value and press Enter. The terminal does not display the value while you enter it.

The Browse CLI encrypts the value on your machine. Save the secret ID from the response. You need it for later commands.

Check the secret metadata

Browse CLI
Node.js
Python

List your secrets:

browse cloud secrets list

Get one secret by ID:

browse cloud secrets get <secret-id>

Node.js

import { Browserbase } from "@browserbasehq/sdk";

const bb = new Browserbase({
  apiKey: process.env.BROWSERBASE_API_KEY!,
});

const secrets = await bb.secrets.list();
console.log(secrets.data);

const secret = await bb.secrets.retrieve("<secret-id>");
console.log(secret);

Python

import os
from browserbase import Browserbase

bb = Browserbase(api_key=os.environ["BROWSERBASE_API_KEY"])

secrets = bb.secrets.list()
print(secrets.data)

secret = bb.secrets.retrieve("<secret-id>")
print(secret)

These operations return the secret ID and name. They don’t return the secret value.

Update a secret

Replace the stored value without changing the secret ID or its Function attachments:

browse cloud secrets update <secret-id>

The command prompts for the new value and encrypts it with the current project public key.

Delete a secret

Delete a secret by ID:

Browse CLI
Node.js
Python

browse cloud secrets delete <secret-id>

Node.js

import { Browserbase } from "@browserbasehq/sdk";

const bb = new Browserbase({
  apiKey: process.env.BROWSERBASE_API_KEY!,
});

await bb.secrets.delete("<secret-id>");

Python

import os
from browserbase import Browserbase

bb = Browserbase(api_key=os.environ["BROWSERBASE_API_KEY"])

bb.secrets.delete("<secret-id>")

Deleting a secret also removes its Function attachments. A deleted secret is not available to later Function invocations.

Welcome

Platform

Use cases

Optimization

Account

Use a secret in a Function

Create a secret

Update a secret

Delete a secret

How Browserbase handles secret values

Next step

Add secrets to a Function

Use a secret in a Function

​Create a secret

​Update a secret

​Delete a secret

​How Browserbase handles secret values

​Next step

Add secrets to a Function

Create a secret

Update a secret

Delete a secret

How Browserbase handles secret values

Next step