ManticScore lets you store API keys for third-party services so that Forge, the AI agent, and automation features can use them on your behalf. Keys are encrypted at rest and are never returned in plaintext — only a masked preview is shown after saving.
Supported secrets
Save or update secrets
Send a PUT request with the keys you want to set. You can set multiple keys in one call. Pass null to clear a key. Any key you omit is left unchanged.
Response:
The response shows masked values (only the first few characters) and boolean flags for each key. Use the has_* flags in your UI — they reliably indicate whether a key is stored without leaking any part of the actual value.
Keys are never returned in full after saving. If you need to rotate a key, simply call PUT /secrets with the new value.
Read current status
The response has the same shape as the PUT response — masked values and has_* boolean flags.
Clearing a key
To remove a stored key, pass null for that key:
Omit the other keys to leave them unchanged.
Bootstrap includes secrets status
When you call GET /auth/bootstrap on app launch, the response includes your secrets status so you don’t need a separate round trip:
Use the bootstrap call on app launch to check which keys are stored before prompting the user to connect integrations.