Variables and secrets

platform v0.9.11verified 2026-05-14

Path: /settings → Variables tab

Team variables are key/value pairs you reference from agent instructions and tool code. They externalise configuration (URLs, flags) and credentials (API keys, tokens, passwords) so nothing is hardcoded.

AccessADMIN+

Variable types

Type	Stored in	Visible in UI	Use case
PLAIN_TEXT	Postgres	Yes	URLs, environment names, feature toggles, non-sensitive config.
SECRET	Team's AWS Secrets Manager	No (masked after save)	API keys, passwords, tokens, credentials.

SECRETs require Secrets Manager to be configured in the Team tab.

Fields

Field	Required	Description
Key	Yes	Variable name (e.g. API_URL, OPENAI_KEY). Unique per team.
Type	Yes	PLAIN_TEXT or SECRET.
Value	Conditional	Required for PLAIN_TEXT; entered (and hidden after save) for SECRET.
Description	No	Optional notes.

Using variables in agents

Variables are referenced from agent instructions and tool code. TelPhi resolves references and injects the actual value at runtime. Changing a variable affects every agent referencing it on the next sync.

Workflows

Create a PLAIN_TEXT variable

1. Click Create.
2. Enter Key and Value (and optional Description).
3. Select type PLAIN_TEXT.
4. Save.

Create a SECRET variable

1. Ensure Secrets Manager is configured (Team tab).
2. Click Create, enter Key, select SECRET, enter Value.
3. Save. Value is stored in AWS Secrets Manager and masked in the UI.

Update a secret value

Use Set Secret on the row, enter the new value, save. The previous value is overwritten in AWS Secrets Manager.

Delete a variable

Use the delete action. For SECRETs, the entry is also removed from Secrets Manager.

Screenshotguide/team-admin/variablesunregistered

Settings → Variables tab

Highlight: type column (PLAIN_TEXT shows value, SECRET masked), create button, Set Secret action

See also

• Team overview — Secrets Manager configuration.
• Flow Designer → Variable Catalogue — where variables are referenced.