# Blink Secrets

> Manage the encrypted secrets vault for this agent or other agents in the workspace. List, set, and delete secrets. Secrets are available as $KEY_NAME in all shell commands. Values are never shown after being saved — only key names are listed. Use for credential management, rotating API keys, or bootstrapping other agents.

- Skill: `blink-new/blink-secrets` (Agent Skill)
- Install (CLI): `npx skillmds@latest add blink-new/blink-secrets`
- Raw SKILL.md: https://api.skillmd.com/api/skills/blink-new/blink-secrets/raw
- Safety review: pending
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: AI & ML
- Author: blink-new (https://skillmd.com/u/blink-new)
- Updated: 2026-09-17
- Page: https://skillmd.com/skills/blink-new/blink-secrets

---


# Blink Secrets

Manage the encrypted secrets vault using `blink secrets`. Zero configuration on Claw machines
— `BLINK_AGENT_ID` is already set.

## List all secret key names
```bash
blink secrets list
```

## Set or update a secret
```bash
blink secrets set GITHUB_TOKEN ghp_xxx
blink secrets set OPENAI_KEY sk-xxx
blink secrets set DATABASE_URL postgres://user:pass@host/db
```

## Delete a secret
```bash
blink secrets delete OLD_API_KEY
```

## Cross-agent management (set secrets on another agent)
```bash
blink secrets set --agent clw_other OPENAI_KEY sk-xxx
blink secrets list --agent clw_other
blink secrets delete --agent clw_other OLD_KEY
```

## Rotate a key
```bash
blink secrets set GITHUB_TOKEN ghp_new_value
# Old value is replaced — no need to delete first
```

## Command signatures
```
blink secrets list [--agent <agent_id>]
blink secrets set <key> <value> [--agent <agent_id>]
blink secrets delete <key> [--agent <agent_id>]
```
All secrets are stored encrypted (AES-256-GCM) and never returned in plaintext via the API.
After setting, the secret is immediately available as `$KEY_NAME` in all shell commands — no restart required.