Agentic Data Plane

Manage Secrets

Store the API keys, tokens, and certificates your LLM providers, MCP servers, OAuth providers, and triggers need in the Redpanda Agentic Data Plane secret store. Those resources reference a secret by its ID, so each credential lives in one place and no one can read it back. When a credential changes, you update one secret instead of editing everything that uses it.

After reading this page, you will be able to:

  • Create a secret in the secret store and reference it from an LLM provider or MCP server

  • Rotate a secret’s value or update its tags without changing its ID

  • Grant someone access to view, change, or delete secrets

Prerequisites

You need permission to create, update, and delete secrets. The Admin role carries it, as do policies built from the adp-standard and adp-full templates. The built-in Owner lifecycle policy also lets you update and delete secrets you created. See Who can manage secrets.

How secrets work

A secret has an ID, a value, and optional tags:

  • ID: The name other resources use to reference the secret, such as OPENAI_API_KEY. An ID starts with a letter and uses only uppercase letters, numbers, and underscores, up to 255 characters. You can’t change it after you create the secret.

  • Value: The credential itself, up to 64 KiB. The value is write-only. After you save it, neither the UI nor anyone with access to the secret can read it back.

  • Tags: Key-value pairs for organizing secrets and for writing access policy conditions. A secret holds up to 50 tags, and each value can be up to 256 characters. See Attribute reference.

The secret pickers on provider and server forms list only the secrets in the Agentic Data Plane secret store, which are the ones AI Gateway can read. The pickers don’t show a secret that Redpanda Cloud holds for another product, such as a Redpanda Connect pipeline, and a new secret can’t reuse that secret’s name.

Create a secret

  1. Open Secrets store in the sidebar.

  2. Click Create secret.

  3. Enter the ID. The field uppercases what you type.

  4. Under Value, select a format:

    • Single line: For API keys and tokens. The value can’t start or end with a space or line break.

    • Multiline: For PEM keys, JSON, or other values with line breaks. The form removes a final line break.

  5. Enter the value.

  6. Optional: Under Tags, enter a tag key and value, and then click the plus button or press Enter. Repeat for each tag.

  7. Click Create secret.

To use the secret, select it by ID in the credential field of an LLM provider, MCP server, OAuth provider, or trigger. See Configure an LLM Provider and Create an MCP Server.

You can also create a secret without leaving those forms. Their credential fields let you store a new value in place. Agentic Data Plane saves it to the secret store.

Find a secret

Open Secrets store in the sidebar. The list shows each secret’s ID and tags. Search by ID, or filter by tag.

To see one secret, open its row menu and click View details. The details page shows the ID and tags. It never shows the value.

Rotate a value or change tags

  1. Open Secrets store in the sidebar.

  2. Open the secret’s row menu and click Edit.

  3. To rotate the credential, enter the new value. To keep the current value, leave the field blank.

  4. To change tags, edit the list under Tags. Saving replaces the secret’s whole tag set with what the form shows.

  5. Click Save changes.

If someone else saved the secret after you opened it, the save fails and asks you to reload the page. Reload, then make your changes again.

When a new value takes effect

Resources keep their reference to the secret’s ID, so you don’t edit them after a rotation. How soon each one uses the new value depends on the resource:

  • OpenAI, Anthropic, and Google LLM providers: Within about five minutes.

  • Amazon Bedrock LLM providers: On the next request.

  • Self-managed MCP servers that authenticate with a static key or with service account OAuth: On the next call.

  • Managed MCP servers that use a secret, such as GitHub (Read) with a shared token: Within about ten minutes.

Delete a secret

Deleting a secret is permanent. You can’t recover the stored value, and any MCP server, AI agent, or other resource that references the secret loses access. Agentic Data Plane doesn’t check whether anything still uses a secret before deleting it. Find and update those resources first.

  1. Open Secrets store in the sidebar.

  2. Open the secret’s row menu and click Delete.

  3. Type the secret’s ID to confirm, and click Delete.

To delete a secret from its details page instead, click Delete secret, type delete to confirm, and click Delete. To delete several secrets together, select their rows in the list, click the Delete button that shows how many you selected, and confirm.

Who can manage secrets

You grant access to secrets with access policies on the Secret actions: Secret.get, Secret.list, Secret.create, Secret.update, and Secret.delete.

Who Secret access

Admin role

All five actions

Policies from the adp-standard or adp-full template

All five actions

Policies from the adp-readonly or adp-sandboxed template

Secret.get and Secret.list

The person who created a secret

Secret.get, Secret.update, and Secret.delete on that secret, through the built-in Owner lifecycle policy

Granting Secret.get or Secret.list discloses a secret’s ID and tags, never its value. To limit someone to some secrets, write a policy condition on the secret’s tags. See Manage Access Policies and Secret permissions.

Next steps