Store encrypted files that are materialized into the workspace at task start
Secret files are arbitrary, project-relative files — a .env, a service-account JSON, a TLS certificate — stored encrypted and written into your workspace when a task starts. Use them when a tool expects an actual file on disk rather than a value in the environment.
Each secret file is stored encrypted at rest against your project. When a task starts, the file is decrypted and written into the project working directory (PROJECT_CWD) inside the workspace VM with owner-only permissions (0600).Paths are project-relative. A path must not be absolute and must not contain ... Nested paths are allowed — config/service-account.json lands at config/service-account.json under the project root.
Listing secret files shows paths and update times only — never the decrypted contents.
The first argument is both the local path and the path the file will have inside the workspace. Use --from <file> when the local path differs. To pipe content, opt in explicitly with --stdin:
{"docsConfig":{"theme":"mint","$schema":"https://mintlify.com/docs.json","name":"Aether","colors":{"primary":"#9184ff","light":"#b3a9ff","dark":"#9184ff"},"logo":{"light":"https://mintcdn.com/aether-c4587800/hrC9bOYLpJ53VNbo/logo/light.svg?fit=max\u0026auto=format\u0026n=hrC9bOYLpJ53VNbo\u0026q=85\u0026s=cdf40b8647da8a5d82a91e289a1958f7","dark":"https://mintcdn.com/aether-c4587800/hrC9bOYLpJ53VNbo/logo/dark.svg?fit=max\u0026auto=format\u0026n=hrC9bOYLpJ53VNbo\u0026q=85\u0026s=ff1a5d20e563918957a5f0eba367dee4","href":"https://www.runaether.dev"},"favicon":"https://mintcdn.com/aether-c4587800/hrC9bOYLpJ53VNbo/favicon.svg?fit=max\u0026auto=format\u0026n=hrC9bOYLpJ53VNbo\u0026q=85\u0026s=26bfe1ec698456a716b64fb50a5848be","api":{"openapi":"api-reference/openapi.json"},"appearance":{"default":"dark","strict":true},"background":{"color":{"light":"#f4f3ef","dark":"#08080b"}},"navbar":{"links":[{"href":"https://www.runaether.dev/changelog","label":"Changelog"}],"primary":{"type":"button","label":"Open Aether","href":"https://app.runaether.dev"}},"footer":{"socials":{"x":"https://x.com/pranavctl","github":"https://github.com/Aether-Runtime"}},"fonts":{"family":"Geist"},"styling":{"codeblocks":"dark","latex":true},"navigation":{"pages":[]}},"deployment":{"deploymentMetadataValue":{"subdomain":"aether-c4587800","hasAudioNarration":false,"actualSubdomain":"aether-c4587800","customDomains":["docs.runaether.dev"],"gitSource":{"type":"github","owner":"aether-runtime","repo":"aether","deployBranch":"main","contentDirectory":"apps/docs","isPrivate":true,"mountPath":"","label":""},"chroma":{"liveDeploymentHistoryId":"6ae9face382c567ac4571d76","collectionId":"f2dea78c-98f9-42ab-8065-74f909e4ff84","schemaVersion":"v3","latestBuiltDeploymentHistoryId":"6ae9face382c567ac4571d76"},"entitlements":{},"buildId":"6ae9face382c567ac4571d76","clientVersion":"0.0.4067","searchFilterCounts":[{"language":"default","tag":"API Reference","count":285},{"language":"default","tag":"CLI Reference","count":40},{"language":"default","tag":"Pull Requests","count":35},{"language":"default","tag":"Tasks","count":29},{"language":"default","tag":"Guides","count":28},{"language":"default","tag":"Using Aether","count":24},{"language":"default","tag":"MCP Servers","count":23},{"language":"default","tag":"Concepts","count":22},{"language":"default","tag":"Agent","count":17},{"language":"default","tag":"Organizations","count":17}]},"assistantConfig":{"enableAskAiButton":false,"enableStarterQuestions":false,"enableAskAiSearchBar":true},"basePath":"","hasChatPermissions":false,"hasWebMcpPermissions":false,"toggles":[{"name":"kill-isr","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"agent-mintlify-slack","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"agent-integrations-settings","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"rbac-expansion","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"automations-pr-grouping","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"custom-prefix","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"analytics-v7","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"user-flows-analytics","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"no-publish-flow","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"workos-onboarding","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"llms-txt-v2","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"snapshot-serving-live","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"stripTemperatureMiddleware","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"support-platform-pylon-zendesk","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"snapshot-serving","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"instant-rollback","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"granular-notifications-server","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"granular-notifications","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"automations-fable","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"fixed-ai-action-pricing","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"automation-resolve-merge-conflict","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"scoped-publishing","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"mintql","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"page-level-analytics","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"editor-version-history-v2","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"billing-page-v2","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"full-page-search","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"workspace-projects","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"assistant-v5","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"fork-pr-previews","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"revalidation-jwt","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"vite-origin","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"workos-sso-scim","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"hobby-abuse-scan","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"dashboard-inbox","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"workos-signup","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"turbopuffer-dual-write","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"workos-enabled","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"approve-review-flow","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"sso-setup-deadline-banner","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"turbopuffer-serve","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false}],"googleFontsInlined":true},"customCss":[{"filePath":"style.css","content":":root{color-scheme:dark}::selection{background:rgba(145, 132, 255, 0.25)}"}],"page":{"pagePath":"guides/secret-files","slug":"/guides/secret-files","pageMetadata":{"title":"Secret Files","description":"Store encrypted files that are materialized into the workspace at task start","href":"/guides/secret-files"},"description":{"compiledSource":"\"use strict\";\nconst {jsx: _jsx} = arguments[0];\nconst {useMDXComponents: _provideComponents} = arguments[0];\nfunction _createMdxContent(props) {\n const _components = {\n p: \"p\",\n ..._provideComponents(),\n ...props.components\n };\n return _jsx(_components.p, {\n children: \"Store encrypted files that are materialized into the workspace at task start\"\n });\n}\nfunction MDXContent(props = {}) {\n const {wrapper: MDXLayout} = {\n ..._provideComponents(),\n ...props.components\n };\n return MDXLayout ? _jsx(MDXLayout, {\n ...props,\n children: _jsx(_createMdxContent, {\n ...props\n })\n }) : _createMdxContent(props);\n}\nreturn {\n default: MDXContent\n};\n","frontmatter":{},"scope":{}},"pageType":"default","mdx":{"mdxSource":{"compiledSource":"\"use strict\";const{Fragment:_Fragment,jsx:_jsx,jsxs:_jsxs}=arguments[0];const{useMDXComponents:_provideComponents}=arguments[0];function _createMdxContent(props){const _components={a:`a`,code:`code`,li:`li`,p:`p`,pre:`pre`,span:`span`,tbody:`tbody`,td:`td`,th:`th`,thead:`thead`,tr:`tr`,ul:`ul`,..._provideComponents(),...props.components},{CodeBlock,Heading,Table,Warning}=_components;if(!CodeBlock)_missingMdxReference(`CodeBlock`,true);if(!Heading)_missingMdxReference(`Heading`,true);if(!Table)_missingMdxReference(`Table`,true);if(!Warning)_missingMdxReference(`Warning`,true);return _jsxs(_Fragment,{children:[_jsxs(_components.p,{children:[`Secret files are arbitrary, project-relative files — a `,_jsx(_components.code,{children:`.env`}),`, a service-account JSON, a TLS certificate — stored encrypted and written into your workspace when a task starts. Use them when a tool expects an actual file on disk rather than a value in the environment.`]}),`\n`,_jsx(Heading,{level:`2`,id:`secret-files-vs-environment-variables`,children:`Secret Files vs Environment Variables`}),`\n`,_jsx(_components.p,{children:`These are two separate features. Pick by where your tooling expects the value:`}),`\n`,_jsxs(Table,{children:[_jsx(_components.thead,{children:_jsxs(_components.tr,{children:[_jsx(_components.th,{}),_jsx(_components.th,{children:_jsx(_components.a,{href:`/guides/environment-variables`,children:`Environment variables`})}),_jsx(_components.th,{children:`Secret files`})]})}),_jsxs(_components.tbody,{children:[_jsxs(_components.tr,{children:[_jsx(_components.td,{children:`Shape`}),_jsx(_components.td,{children:`Key/value pairs`}),_jsx(_components.td,{children:`Whole files`})]}),_jsxs(_components.tr,{children:[_jsx(_components.td,{children:`Delivered as`}),_jsx(_components.td,{children:`Injected into the agent’s process environment`}),_jsx(_components.td,{children:`Written to disk in the project directory`})]}),_jsxs(_components.tr,{children:[_jsx(_components.td,{children:`Managed with`}),_jsx(_components.td,{children:_jsx(_components.code,{children:`aether env`})}),_jsx(_components.td,{children:_jsx(_components.code,{children:`aether secret`})})]}),_jsxs(_components.tr,{children:[_jsx(_components.td,{children:`Use for`}),_jsxs(_components.td,{children:[_jsx(_components.code,{children:`DATABASE_URL`}),`, API keys read from `,_jsx(_components.code,{children:`process.env`})]}),_jsxs(_components.td,{children:[_jsx(_components.code,{children:`.env`}),` files, certs, JSON credential files`]})]})]})]}),`\n`,_jsx(Heading,{level:`2`,id:`how-it-works`,children:`How It Works`}),`\n`,_jsxs(_components.p,{children:[`Each secret file is stored encrypted at rest against your project. When a task starts, the file is decrypted and written into the project working directory (`,_jsx(_components.code,{children:`PROJECT_CWD`}),`) inside the workspace VM with owner-only permissions (`,_jsx(_components.code,{children:`0600`}),`).`]}),`\n`,_jsxs(_components.p,{children:[`Paths are project-relative. A path must not be absolute and must not contain `,_jsx(_components.code,{children:`..`}),`. Nested paths are allowed — `,_jsx(_components.code,{children:`config/service-account.json`}),` lands at `,_jsx(_components.code,{children:`config/service-account.json`}),` under the project root.`]}),`\n`,_jsx(Warning,{children:_jsx(_components.p,{children:`Listing secret files shows paths and update times only — never the decrypted contents.`})}),`\n`,_jsx(Heading,{level:`2`,id:`uploading-a-file`,children:`Uploading a File`}),`\n`,_jsxs(_components.p,{children:[`The `,_jsx(_components.code,{children:`aether secret`}),` command manages secret files (aliases: `,_jsx(_components.code,{children:`secrets`}),`, `,_jsx(_components.code,{children:`secret-file`}),`, `,_jsx(_components.code,{children:`secret-files`}),`).`]}),`\n`,_jsx(CodeBlock,{filename:``,numberOfLines:`1`,language:`shellscript`,children:_jsx(_components.pre,{className:`shiki shiki-themes dark-plus dark-plus`,style:{backgroundColor:`#0B0C0E`,\"--shiki-dark-bg\":`#0B0C0E`,color:`#D4D4D4`,\"--shiki-dark\":`#D4D4D4`},language:`shellscript`,children:_jsxs(_components.code,{language:`shellscript`,numberOfLines:`1`,children:[_jsxs(_components.span,{className:`line`,children:[_jsx(_components.span,{style:{color:`#DCDCAA`,\"--shiki-dark\":`#DCDCAA`},children:`aether`}),_jsx(_components.span,{style:{color:`#CE9178`,\"--shiki-dark\":`#CE9178`},children:` secret`}),_jsx(_components.span,{style:{color:`#CE9178`,\"--shiki-dark\":`#CE9178`},children:` upload`}),_jsx(_components.span,{style:{color:`#CE9178`,\"--shiki-dark\":`#CE9178`},children:` .env`})]}),`\n`]})})}),`\n`,_jsxs(_components.p,{children:[`The first argument is both the local path and the path the file will have inside the workspace. Use `,_jsx(_components.code,{children:`--from \u003cfile>`}),` when the local path differs. To pipe content, opt in explicitly with `,_jsx(_components.code,{children:`--stdin`}),`:`]}),`\n`,_jsx(CodeBlock,{filename:``,numberOfLines:`1`,language:`shellscript`,children:_jsx(_components.pre,{className:`shiki shiki-themes dark-plus dark-plus`,style:{backgroundColor:`#0B0C0E`,\"--shiki-dark-bg\":`#0B0C0E`,color:`#D4D4D4`,\"--shiki-dark\":`#D4D4D4`},language:`shellscript`,children:_jsxs(_components.code,{language:`shellscript`,numberOfLines:`1`,children:[_jsxs(_components.span,{className:`line`,children:[_jsx(_components.span,{style:{color:`#DCDCAA`,\"--shiki-dark\":`#DCDCAA`},children:`cat`}),_jsx(_components.span,{style:{color:`#CE9178`,\"--shiki-dark\":`#CE9178`},children:` service-account.json`}),_jsx(_components.span,{style:{color:`#D4D4D4`,\"--shiki-dark\":`#D4D4D4`},children:` | `}),_jsx(_components.span,{style:{color:`#DCDCAA`,\"--shiki-dark\":`#DCDCAA`},children:`aether`}),_jsx(_components.span,{style:{color:`#CE9178`,\"--shiki-dark\":`#CE9178`},children:` secret`}),_jsx(_components.span,{style:{color:`#CE9178`,\"--shiki-dark\":`#CE9178`},children:` upload`}),_jsx(_components.span,{style:{color:`#CE9178`,\"--shiki-dark\":`#CE9178`},children:` config/service-account.json`}),_jsx(_components.span,{style:{color:`#569CD6`,\"--shiki-dark\":`#569CD6`},children:` --stdin`})]}),`\n`]})})}),`\n`,_jsx(_components.p,{children:`The CLI accepts regular UTF-8 files up to 1 MiB and rejects symlinks and special files.`}),`\n`,_jsx(Heading,{level:`2`,id:`listing-files`,children:`Listing Files`}),`\n`,_jsx(CodeBlock,{filename:``,numberOfLines:`1`,language:`shellscript`,children:_jsx(_components.pre,{className:`shiki shiki-themes dark-plus dark-plus`,style:{backgroundColor:`#0B0C0E`,\"--shiki-dark-bg\":`#0B0C0E`,color:`#D4D4D4`,\"--shiki-dark\":`#D4D4D4`},language:`shellscript`,children:_jsxs(_components.code,{language:`shellscript`,numberOfLines:`1`,children:[_jsxs(_components.span,{className:`line`,children:[_jsx(_components.span,{style:{color:`#DCDCAA`,\"--shiki-dark\":`#DCDCAA`},children:`aether`}),_jsx(_components.span,{style:{color:`#CE9178`,\"--shiki-dark\":`#CE9178`},children:` secret`}),_jsx(_components.span,{style:{color:`#CE9178`,\"--shiki-dark\":`#CE9178`},children:` list`})]}),`\n`]})})}),`\n`,_jsx(CodeBlock,{numberOfLines:`4`,language:`text`,children:_jsx(_components.pre,{className:`shiki shiki-themes dark-plus dark-plus`,style:{backgroundColor:`#0B0C0E`,\"--shiki-dark-bg\":`#0B0C0E`,color:`#D4D4D4`,\"--shiki-dark\":`#D4D4D4`},language:`text`,children:_jsxs(_components.code,{language:`text`,numberOfLines:`4`,children:[_jsx(_components.span,{className:`line`,children:_jsx(_components.span,{children:`PATH UPDATED`})}),`\n`,_jsx(_components.span,{className:`line`,children:_jsx(_components.span,{children:`.env 5 minutes ago`})}),`\n`,_jsx(_components.span,{className:`line`,children:_jsx(_components.span,{children:`config/service-account.json 2 days ago`})}),`\n`,_jsx(_components.span,{className:`line`,children:_jsx(_components.span,{})})]})})}),`\n`,_jsx(Heading,{level:`2`,id:`reading-a-file`,children:`Reading a File`}),`\n`,_jsx(CodeBlock,{filename:``,numberOfLines:`1`,language:`shellscript`,children:_jsx(_components.pre,{className:`shiki shiki-themes dark-plus dark-plus`,style:{backgroundColor:`#0B0C0E`,\"--shiki-dark-bg\":`#0B0C0E`,color:`#D4D4D4`,\"--shiki-dark\":`#D4D4D4`},language:`shellscript`,children:_jsxs(_components.code,{language:`shellscript`,numberOfLines:`1`,children:[_jsxs(_components.span,{className:`line`,children:[_jsx(_components.span,{style:{color:`#DCDCAA`,\"--shiki-dark\":`#DCDCAA`},children:`aether`}),_jsx(_components.span,{style:{color:`#CE9178`,\"--shiki-dark\":`#CE9178`},children:` secret`}),_jsx(_components.span,{style:{color:`#CE9178`,\"--shiki-dark\":`#CE9178`},children:` get`}),_jsx(_components.span,{style:{color:`#CE9178`,\"--shiki-dark\":`#CE9178`},children:` .env`})]}),`\n`]})})}),`\n`,_jsx(_components.p,{children:`Prints the decrypted contents to stdout.`}),`\n`,_jsx(Heading,{level:`2`,id:`deleting-a-file`,children:`Deleting a File`}),`\n`,_jsx(CodeBlock,{filename:``,numberOfLines:`1`,language:`shellscript`,children:_jsx(_components.pre,{className:`shiki shiki-themes dark-plus dark-plus`,style:{backgroundColor:`#0B0C0E`,\"--shiki-dark-bg\":`#0B0C0E`,color:`#D4D4D4`,\"--shiki-dark\":`#D4D4D4`},language:`shellscript`,children:_jsxs(_components.code,{language:`shellscript`,numberOfLines:`1`,children:[_jsxs(_components.span,{className:`line`,children:[_jsx(_components.span,{style:{color:`#DCDCAA`,\"--shiki-dark\":`#DCDCAA`},children:`aether`}),_jsx(_components.span,{style:{color:`#CE9178`,\"--shiki-dark\":`#CE9178`},children:` secret`}),_jsx(_components.span,{style:{color:`#CE9178`,\"--shiki-dark\":`#CE9178`},children:` delete`}),_jsx(_components.span,{style:{color:`#CE9178`,\"--shiki-dark\":`#CE9178`},children:` .env`})]}),`\n`]})})}),`\n`,_jsxs(_components.p,{children:[`Pass `,_jsx(_components.code,{children:`--force`}),` to skip the confirmation prompt.`]}),`\n`,_jsx(Heading,{level:`2`,id:`bulk-upload`,children:`Bulk Upload`}),`\n`,_jsx(_components.p,{children:`Upload every file in a local directory as secret files in one call:`}),`\n`,_jsx(CodeBlock,{filename:``,numberOfLines:`1`,language:`shellscript`,children:_jsx(_components.pre,{className:`shiki shiki-themes dark-plus dark-plus`,style:{backgroundColor:`#0B0C0E`,\"--shiki-dark-bg\":`#0B0C0E`,color:`#D4D4D4`,\"--shiki-dark\":`#D4D4D4`},language:`shellscript`,children:_jsxs(_components.code,{language:`shellscript`,numberOfLines:`1`,children:[_jsxs(_components.span,{className:`line`,children:[_jsx(_components.span,{style:{color:`#DCDCAA`,\"--shiki-dark\":`#DCDCAA`},children:`aether`}),_jsx(_components.span,{style:{color:`#CE9178`,\"--shiki-dark\":`#CE9178`},children:` secret`}),_jsx(_components.span,{style:{color:`#CE9178`,\"--shiki-dark\":`#CE9178`},children:` bulk-upload`}),_jsx(_components.span,{style:{color:`#CE9178`,\"--shiki-dark\":`#CE9178`},children:` ./secrets`})]}),`\n`]})})}),`\n`,_jsxs(_components.p,{children:[`Files keep their paths relative to the directory you point at. Add `,_jsx(_components.code,{children:`--prefix`}),` to nest them under a path inside the workspace:`]}),`\n`,_jsx(CodeBlock,{filename:``,numberOfLines:`1`,language:`shellscript`,children:_jsx(_components.pre,{className:`shiki shiki-themes dark-plus dark-plus`,style:{backgroundColor:`#0B0C0E`,\"--shiki-dark-bg\":`#0B0C0E`,color:`#D4D4D4`,\"--shiki-dark\":`#D4D4D4`},language:`shellscript`,children:_jsxs(_components.code,{language:`shellscript`,numberOfLines:`1`,children:[_jsxs(_components.span,{className:`line`,children:[_jsx(_components.span,{style:{color:`#DCDCAA`,\"--shiki-dark\":`#DCDCAA`},children:`aether`}),_jsx(_components.span,{style:{color:`#CE9178`,\"--shiki-dark\":`#CE9178`},children:` secret`}),_jsx(_components.span,{style:{color:`#CE9178`,\"--shiki-dark\":`#CE9178`},children:` bulk-upload`}),_jsx(_components.span,{style:{color:`#CE9178`,\"--shiki-dark\":`#CE9178`},children:` ./secrets`}),_jsx(_components.span,{style:{color:`#569CD6`,\"--shiki-dark\":`#569CD6`},children:` --prefix`}),_jsx(_components.span,{style:{color:`#CE9178`,\"--shiki-dark\":`#CE9178`},children:` config`})]}),`\n`]})})}),`\n`,_jsx(Heading,{level:`2`,id:`api-endpoints`,children:`API Endpoints`}),`\n`,_jsx(_components.p,{children:`Secret files are also available through the REST API. See the API reference for request and response shapes:`}),`\n`,_jsxs(_components.ul,{children:[`\n`,_jsx(_components.li,{children:_jsx(_components.a,{href:`/api-reference/endpoints/secret-files/get-projects-by-projectid-secret-files`,children:`List secret files`})}),`\n`,_jsxs(_components.li,{children:[_jsx(_components.a,{href:`/api-reference/endpoints/secret-files/put-projects-by-projectid-secret-files-by-filekey`,children:`Set a secret file`}),`, by its key: the unpadded base64url encoding of its path`]}),`\n`,_jsx(_components.li,{children:_jsx(_components.a,{href:`/api-reference/endpoints/secret-files/post-projects-by-projectid-secret-files-bulk`,children:`Bulk upload`})}),`\n`,_jsxs(_components.li,{children:[_jsx(_components.a,{href:`/api-reference/endpoints/secret-files/get-projects-by-projectid-secret-files-by-filekey`,children:`Get a secret file`}),`, by key and path, without its content`]}),`\n`,_jsxs(_components.li,{children:[_jsx(_components.a,{href:`/api-reference/endpoints/secret-files/get-projects-by-projectid-secret-files-by-filekey-content`,children:`Get a secret file’s content`}),`, an owner’s or admin’s read`]}),`\n`,_jsx(_components.li,{children:_jsx(_components.a,{href:`/api-reference/endpoints/secret-files/delete-projects-by-projectid-secret-files-by-filekey`,children:`Delete a secret file`})}),`\n`]})]})}function MDXContent(props={}){const{wrapper:MDXLayout}={..._provideComponents(),...props.components};return MDXLayout?_jsx(MDXLayout,{...props,children:_jsx(_createMdxContent,{...props})}):_createMdxContent(props)}return{default:MDXContent};function _missingMdxReference(id,component){throw new Error(`Expected `+(component?`component`:`object`)+\" `\"+id+\"` to be defined: you likely forgot to import, pass, or provide it.\")}","frontmatter":{},"scope":{"codeStyling":"dark","config":{},"pageMetadata":{"title":"Secret Files","description":"Store encrypted files that are materialized into the workspace at task start","href":"/guides/secret-files"}}},"mdxSourceWithNoJs":null},"mdxExtracts":{"tableOfContents":[{"title":"Secret Files vs Environment Variables","slug":"secret-files-vs-environment-variables","depth":2,"children":[]},{"title":"How It Works","slug":"how-it-works","depth":2,"children":[]},{"title":"Uploading a File","slug":"uploading-a-file","depth":2,"children":[]},{"title":"Listing Files","slug":"listing-files","depth":2,"children":[]},{"title":"Reading a File","slug":"reading-a-file","depth":2,"children":[]},{"title":"Deleting a File","slug":"deleting-a-file","depth":2,"children":[]},{"title":"Bulk Upload","slug":"bulk-upload","depth":2,"children":[]},{"title":"API Endpoints","slug":"api-endpoints","depth":2,"children":[]}],"codeExamples":{}},"jsLinks":[],"subdomain":"aether-c4587800","siteName":"Aether","title":"Secret Files - Aether","navMaps":{"firstHrefInVersion":{},"firstHrefInLanguage":{}},"lastModified":"2026-10-29T12:37:26.087Z","originalFileLocation":"guides/secret-files.mdx"},"headHtml":"\u003cscript data-mint-head>(function(){var d=document.documentElement,p=\"dark\";if(!p){try{p=localStorage.getItem(\"isDarkMode\")}catch(e){}if(p==='true')p='dark';else if(p==='false')p='light';if(p!=='light'\u0026\u0026p!=='dark'\u0026\u0026p!=='system')p=\"dark\"}var r=p==='system'?(matchMedia(\"(prefers-color-scheme: dark)\").matches?'dark':'light'):p;d.classList.remove(r==='dark'?'light':'dark');d.classList.add(r);d.setAttribute(\"data-theme-preference\",p)})();\u003c/script>\u003cmeta data-mint-head name=\"description\" content=\"Store encrypted files that are materialized into the workspace at task start\">\u003cmeta data-mint-head name=\"application-name\" content=\"Aether\">\u003cmeta data-mint-head name=\"generator\" content=\"Mintlify\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"192x192\" href=\"/mintlify-assets/_mintlify/favicons/aether-c4587800/RjJo40w5LK5jrZHD/_generated/favicon/android-chrome-192x192.png\" media=\"(prefers-color-scheme: light)\">\u003clink data-mint-head rel=\"apple-touch-icon\" type=\"image/png\" sizes=\"180x180\" href=\"/mintlify-assets/_mintlify/favicons/aether-c4587800/RjJo40w5LK5jrZHD/_generated/favicon/apple-touch-icon.png\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"16x16\" href=\"/mintlify-assets/_mintlify/favicons/aether-c4587800/RjJo40w5LK5jrZHD/_generated/favicon/favicon-16x16.png\" media=\"(prefers-color-scheme: light)\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"32x32\" href=\"/mintlify-assets/_mintlify/favicons/aether-c4587800/RjJo40w5LK5jrZHD/_generated/favicon/favicon-32x32.png\" media=\"(prefers-color-scheme: light)\">\u003clink data-mint-head rel=\"shortcut icon\" type=\"image/x-icon\" href=\"/mintlify-assets/_mintlify/favicons/aether-c4587800/RjJo40w5LK5jrZHD/_generated/favicon/favicon.ico\" media=\"(prefers-color-scheme: light)\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"192x192\" href=\"/mintlify-assets/_mintlify/favicons/aether-c4587800/RjJo40w5LK5jrZHD/_generated/favicon-dark/android-chrome-192x192.png\" media=\"(prefers-color-scheme: dark)\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"16x16\" href=\"/mintlify-assets/_mintlify/favicons/aether-c4587800/RjJo40w5LK5jrZHD/_generated/favicon-dark/favicon-16x16.png\" media=\"(prefers-color-scheme: dark)\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"32x32\" href=\"/mintlify-assets/_mintlify/favicons/aether-c4587800/RjJo40w5LK5jrZHD/_generated/favicon-dark/favicon-32x32.png\" media=\"(prefers-color-scheme: dark)\">\u003clink data-mint-head rel=\"shortcut icon\" type=\"image/x-icon\" href=\"/mintlify-assets/_mintlify/favicons/aether-c4587800/RjJo40w5LK5jrZHD/_generated/favicon-dark/favicon.ico\" media=\"(prefers-color-scheme: dark)\">\u003cmeta data-mint-head property=\"og:title\" content=\"Secret Files - Aether\">\u003cmeta data-mint-head property=\"og:description\" content=\"Store encrypted files that are materialized into the workspace at task start\">\u003cmeta data-mint-head property=\"og:site_name\" content=\"Aether\">\u003cmeta data-mint-head property=\"og:url\" content=\"https://docs.runaether.dev/guides/secret-files\">\u003cmeta data-mint-head property=\"og:type\" content=\"website\">\u003cmeta data-mint-head property=\"og:image\" content=\"https://aether-c4587800.mintlify.app/_mintlify/api/og/v2?division=Using+Aether\u0026amp;title=Secret+Files\u0026amp;description=Store+encrypted+files+that+are+materialized+into+the+workspace+at+task+start\u0026amp;theme=45bbe8413141f5c0b81fcea8\u0026amp;signature=39c068e53e3aa329713ff2b3691b25c0963e977036320cdaad457d74881f53c6\">\u003cmeta data-mint-head property=\"og:image:width\" content=\"1200\">\u003cmeta data-mint-head property=\"og:image:height\" content=\"630\">\u003cmeta data-mint-head name=\"twitter:card\" content=\"summary_large_image\">\u003cmeta data-mint-head name=\"twitter:title\" content=\"Secret Files - Aether\">\u003cmeta data-mint-head name=\"twitter:description\" content=\"Store encrypted files that are materialized into the workspace at task start\">\u003cmeta data-mint-head name=\"twitter:image\" content=\"https://aether-c4587800.mintlify.app/_mintlify/api/og/v2?division=Using+Aether\u0026amp;title=Secret+Files\u0026amp;description=Store+encrypted+files+that+are+materialized+into+the+workspace+at+task+start\u0026amp;theme=45bbe8413141f5c0b81fcea8\u0026amp;signature=39c068e53e3aa329713ff2b3691b25c0963e977036320cdaad457d74881f53c6\">\u003cmeta data-mint-head name=\"twitter:image:width\" content=\"1200\">\u003cmeta data-mint-head name=\"twitter:image:height\" content=\"630\">\u003cmeta data-mint-head name=\"msapplication-config\" content=\"/mintlify-assets/_mintlify/favicons/aether-c4587800/RjJo40w5LK5jrZHD/_generated/favicon/browserconfig.xml\">\u003cmeta data-mint-head name=\"apple-mobile-web-app-title\" content=\"Aether\">\u003cmeta data-mint-head name=\"msapplication-TileColor\" content=\"#9184ff\">\u003clink data-mint-head rel=\"canonical\" href=\"https://docs.runaether.dev/guides/secret-files\">\u003clink data-mint-head rel=\"alternate\" type=\"application/xml\" href=\"/sitemap.xml\">\u003clink data-mint-head rel=\"alternate\" type=\"text/markdown\" href=\"/guides/secret-files.md\">\u003cscript data-mint-head type=\"application/ld+json\">{\"@context\":\"https://schema.org\",\"@graph\":[{\"@type\":\"Organization\",\"@id\":\"https://docs.runaether.dev/#organization\",\"name\":\"Aether\",\"url\":\"https://docs.runaether.dev\",\"logo\":{\"@type\":\"ImageObject\",\"url\":\"https://mintcdn.com/aether-c4587800/hrC9bOYLpJ53VNbo/logo/light.svg?fit=max\u0026auto=format\u0026n=hrC9bOYLpJ53VNbo\u0026q=85\u0026s=cdf40b8647da8a5d82a91e289a1958f7\"}},{\"@type\":\"WebSite\",\"@id\":\"https://docs.runaether.dev#website\",\"name\":\"Aether\",\"url\":\"https://docs.runaether.dev\",\"publisher\":{\"@id\":\"https://docs.runaether.dev/#organization\"}},{\"@type\":\"WebPage\",\"@id\":\"https://docs.runaether.dev/guides/secret-files#webpage\",\"url\":\"https://docs.runaether.dev/guides/secret-files\",\"name\":\"Secret Files\",\"description\":\"Store encrypted files that are materialized into the workspace at task start\",\"dateModified\":\"2026-10-29T12:37:26.087Z\",\"isPartOf\":{\"@id\":\"https://docs.runaether.dev#website\"},\"breadcrumb\":{\"@id\":\"https://docs.runaether.dev/guides/secret-files#breadcrumb\"}},{\"@type\":\"BreadcrumbList\",\"@id\":\"https://docs.runaether.dev/guides/secret-files#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Using Aether\",\"item\":\"https://docs.runaether.dev/guides/projects\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Secret Files\",\"item\":\"https://docs.runaether.dev/guides/secret-files\"}]},{\"@type\":[\"Article\",\"TechArticle\"],\"@id\":\"https://docs.runaether.dev/guides/secret-files#article\",\"headline\":\"Secret Files\",\"name\":\"Secret Files\",\"description\":\"Store encrypted files that are materialized into the workspace at task start\",\"url\":\"https://docs.runaether.dev/guides/secret-files\",\"mainEntityOfPage\":{\"@id\":\"https://docs.runaether.dev/guides/secret-files#webpage\"},\"dateModified\":\"2026-10-29T12:37:26.087Z\",\"publisher\":{\"@id\":\"https://docs.runaether.dev/#organization\"},\"isPartOf\":{\"@id\":\"https://docs.runaether.dev#website\"}}]}\u003c/script>\u003cscript data-mint-head type=\"application/ld+json\">{\"@context\":\"https://schema.org\",\"@type\":\"WebSite\",\"name\":\"Aether\",\"creator\":{\"@type\":\"Organization\",\"name\":\"Mintlify\",\"url\":\"https://mintlify.com\"}}\u003c/script>","siteName":"Aether","nav":{"global":null,"tabs":[{"tab":"Guides","groups":[{"group":"Getting Started","pages":[{"title":"Introduction","href":"/introduction"},{"title":"Quickstart","href":"/quickstart"},{"title":"Set up Aether with a coding agent","href":"/agent-setup"},{"title":"Support","href":"/support"}]},{"group":"Using Aether","pages":[{"title":"Projects","href":"/guides/projects"},{"title":"Tasks","href":"/guides/tasks"},{"title":"Cloud delegation","href":"/guides/cloud-delegation"},{"title":"Teleport","href":"/guides/teleport"},{"title":"Agents and Models","href":"/guides/agents-and-models"},{"title":"Agent connections","href":"/guides/connect-agent-providers"},{"title":"Workspaces","href":"/guides/workspaces"},{"title":"Workspace Screen","href":"/guides/workspace-ui"},{"title":"Skills","href":"/guides/skills"},{"title":"Environment Variables","description":"Set project environment variables that are injected into the agent's process environment","href":"/guides/environment-variables"},{"title":"Secret Files","href":"/guides/secret-files"},{"title":"Environment Configuration","description":"Configure workspace setup with .aether/environment.json","href":"/guides/environment-json"},{"title":"CLI Tools in Tasks","href":"/guides/cli-tools"},{"title":"GitHub Integration","href":"/guides/github-integration"},{"title":"Preview URLs","href":"/guides/preview-urls"},{"title":"Mobile Testing","href":"/guides/mobile-testing"},{"title":"Integrations","href":"/guides/integrations"},{"title":"Repository MCP Config","href":"/guides/repository-mcp-config"},{"title":"Linear Integration","href":"/guides/linear-integration"},{"title":"Slack Integration","href":"/guides/slack-integration"},{"title":"Usage","href":"/guides/usage"},{"title":"Billing","href":"/guides/billing"},{"title":"Settings","href":"/guides/settings"},{"title":"Notifications","href":"/guides/notifications"}]}]},{"tab":"Concepts","pages":[{"title":"Concepts","href":"/concepts/overview"}]},{"tab":"API Reference","pages":[{"title":"API Reference","href":"/api-reference/overview"}]},{"tab":"CLI Reference","pages":[{"title":"CLI Reference","href":"/cli/overview"}]}]},"basePath":"","title":"Secret Files - Aether","buildId":"dpl_9VVk5y1P8k1ATeJguVngy9Q3cmbD","deploymentId":"dpl_9VVk5y1P8k1ATeJguVngy9Q3cmbD","dynamics":[],"chunks":[]}
