Variables & Secrets

Why it matters

Workflows often need the same value in more than one place: an API key for an external request, a base URL, a channel ID. Until now, that value lived inline in every Workflow that used it. Rotating it meant hunting down each occurrence.

Variables & secrets give you one place to store a value and reference it from any Workflow. Plain variables stay visible so your team can read them at a glance. Secrets encrypt at rest and are never returned by the API, so credentials stop living in plain text inside your Workflow configuration.

What you get

• One settings page for both kinds. Every variable and secret lives in the same list, with its name, kind, description, and when its value was last updated.

• A ready-to-use reference. Each entry shows how it will resolve inside a Workflow: {{variables.name}} for a plain value, {{secrets.name}} for a secret. Insert it from the picker / rather than typing it out; typing the raw string into a field doesn't work.

• Write-only secrets. Siit shows only the last four characters of a secret. Rotating one means typing a new value; leaving the field empty keeps the current one.

• A picker built into the Workflow editor. Custom variables are available on every action. Custom secrets appear only on the Send External Request action, so a secret can never end up in a Slack message, a note, or a reply.

• A dedicated permission. Every admin can read the list, since building a Workflow requires it. Creating, editing, and deleting a variable or secret requires the Manage company variables permission, on by default for owners and admins.

How it works

1. An admin creates a variable or secret once, giving it a name, a value, and an optional description.

2. Siit generates a reference string for it ({{variables.name}} or {{secrets.name}}).

3. That reference is selectable in any Workflow action that supports it.

4. At runtime, Siit resolves the reference to the stored value. Rotating the stored value updates every Workflow that references it, with no need to open each one individually.

Where you can use them

Location	Custom variables	Custom secrets
Send External Request (URL, headers, body)	✓	✓
Other Workflow actions (Slack message, note, reply, etc.)	✓	—
Message templates	✓	—

Note: Secrets are intentionally excluded from any action that renders content a person will read, such as a message or note. This keeps a secret from ever appearing in visible text.

Setting it up

1. Go to Settings → Variables & secrets and click + New. Choose the kind: plain or secret. The kind can't be changed after creation.

2. Give it a name (letters, numbers, and underscores, starting with a letter or underscore), a value, and an optional description.

3. Save. Siit shows the reference string to use into your Workflows: {{variables.name}} or {{secrets.name}}.

4. In any supported Workflow action, open the variable picker and select the entry you need.

Rotating a value

Open the variable or secret and enter a new value. Leaving the value field empty keeps the current one, so you don't need to re-enter a plain variable's value just to update its description.

Tip: Rotating a secret used in several Workflows is a single change. Every reference picks up the new value automatically, so there's no need to edit each Workflow that uses it.

Troubleshooting

• A Workflow reference isn't resolving. Check that the variable or secret still exists under Settings → Variables & secrets. Deleting or renaming a variable does not update the Workflows that reference it; the reference resolves to an empty value at runtime instead.

• I can't create or edit a variable. You need the Manage company variables permission. Any admin can view the list, but changes require this permission to be enabled on your role.