Skip to main content
Secrets are currently in private beta. If you’d like access, please reach out to us at support@e2b.dev.
Secrets let you store credentials such as API keys with E2B and reference them by name. Rather than passing a key as an environment variable or baking it into a template, where any code running in the sandbox can read it, you store the value once and reference it in a network rule. The egress proxy injects the real value into matching outbound HTTPS requests outside the sandbox. Your sandbox configuration contains only a reference to the secret. Secret values are write-only through the management API: create and update accept the value, while responses, reads, lists, and API errors never return it. Manage secrets from your trusted application, keeping its E2B API key outside the sandbox. Secrets belong to the project associated with that key. Only inject credentials into destinations you trust. The destination receives the value and could expose it in its response to the sandbox. With the E2B SDK you can: For short-lived tokens minted per sandbox instead of stored credentials, see workload identity.