managing-variables-and-secrets

When to use

Use this guide for named values that workflow steps read at run time. A variable holds a value people may see, such as an account ID or a page size. A secret holds a sensitive value, such as an API token: it is stored encrypted and never shown again.

Sign in to an app with a connection (connections_create), not a secret, whenever the app has a Stacksync connector. Use building-workflows to put a reference into a step.

How workflows read them

A step field reads a variable or secret by its reference:

{{ WORKSPACE_VARIABLES.api_token }}

variables_list and variables_get return each variable's exact reference. Replacement follows Jinja templating rules: a json value can be read field by field, as {{ WORKSPACE_VARIABLES.settings.region }}.