Keys and secrets

How Astris holds your keys and secrets, and how to tell us about a problem. We add a line when we can prove it.

• Only the Astris API holds the key to the platform that runs your apps. The Console, the MCP, the CLI and your agent all go through the API, and none of them sees that key.
• We keep a hash of each API key, not the key. You see a key once, when you make it, and we cannot show it to you again.
• Astris does not keep the values of your environment variables. It passes them to the platform that runs your app, and the API shows you their names only.

To see what we can show today about where your apps run, read How Astris runs.