Handling Secrets Safely

Previewhost treats secrets as references, not values that are pasted into agent chats.

You define the secret source in preview.yaml and provide the actual value privately when needed.

This keeps credentials out of logs and agent conversations while still allowing services to connect.