Skip to main content
Version: 0.9.17-patch1

Variables and secrets

Path: /settings → Variables tab

Team variables are key/value pairs you reference from agent instructions and tool code. They externalise configuration (URLs, flags) and credentials (API keys, tokens, passwords) so nothing is hardcoded.

Plan availability​

Team variables are available on custom subscriptions only. On standard self-serve tiers (Starter, Business), AI providers are platform-managed: the Variables tab is hidden and variable create/update/delete requests are rejected. Platform-managed default secrets (see below) keep working on every tier — flows that reference {{team.openaiDefaultKey}} or {{team.azureDefaultKey}} are unaffected.

Secret values are never shown on any plan: SECRET variables live in AWS Secrets Manager and the UI/API only ever return a masked placeholder.

Variable types​

TypeStored inVisible in UIUse case
PLAIN_TEXTPostgresYesURLs, environment names, feature toggles, non-sensitive config.
SECRETTeam's AWS Secrets ManagerNo (masked after save)API keys, passwords, tokens, credentials.

SECRETs require Secrets Manager to be configured in the Team tab.

Platform-managed defaults​

On team creation, the platform may provision superuser-managed SECRET variables (openaiDefaultKey, and on higher tiers azureDefaultKey) by copying from platform secrets. These rows are hidden from team admins on this tab; SUPERUSERs can view and override them. Flow templates reference them as {{team.openaiDefaultKey}} and {{team.azureDefaultKey}}.

Fields​

FieldRequiredDescription
KeyYesVariable name (e.g. API_URL, OPENAI_KEY). Unique per team.
TypeYesPLAIN_TEXT or SECRET.
ValueConditionalRequired for PLAIN_TEXT; entered (and hidden after save) for SECRET.
DescriptionNoOptional notes.

Using variables in agents​

Variables are referenced from agent instructions and tool code. TelPhi resolves references and injects the actual value at runtime. Changing a variable affects every agent referencing it on the next sync.

Workflows​

Create a PLAIN_TEXT variable​

  1. Click Create.
  2. Enter Key and Value (and optional Description).
  3. Select type PLAIN_TEXT.
  4. Save.

Create a SECRET variable​

  1. Ensure Secrets Manager is configured (Team tab).
  2. Click Create, enter Key, select SECRET, enter Value.
  3. Save. Value is stored in AWS Secrets Manager and masked in the UI.

Update a secret value​

Use Set Secret on the row, enter the new value, save. The previous value is overwritten in AWS Secrets Manager.

Delete a variable​

Use the delete action. For SECRETs, the entry is also removed from Secrets Manager.

See also​