Secrets

Workspace secrets and environments that runs and deployed apps read. Listing returns metadata only, never values. Reading production values needs a short-lived step-up that a workspace owner or admin approves in the browser (the production-access flow).