# Secrets — Hanzo Cloud

> Versioned secrets with per-environment scoping, synced into Kubernetes as native resources. Nothing is ever written in plaintext, and every read is audited.

[Cloud](https://hanzo.ai/products)/Security

Generally available

# Secrets

Store once, sync everywhere.

Open sourceOn-chain settlement

API

/v1/kms

Google Cloud

Secret Manager

Paste and ship

Paste this into any agent. It reads the skill manifest and calls Secrets from there.

Agent promptapi /v1/kmsCopy

```
Read https://hanzo.ai/skill.md and use Hanzo Secrets in my project. Start with: hanzo kms secrets create
```

Secrets — Hanzo

[IAM](https://hanzo.ai/iam)[Authz](https://hanzo.ai/authz)[KMS](https://hanzo.ai/kms)[Secrets](https://hanzo.ai/cloud/secrets)[Audit](https://hanzo.ai/cloud/audit)[Zero Trust](https://hanzo.ai/cloud/zero-trust)

- gatewayReady
- payments-apiReady
- checkout-webBuilding
- docs-siteReady

Every request enters here, so the limiter does too.

`api.hanzo.ai/v1/kms`[Open in the console](https://hanzo.ai/home)

Example project. Every name in it is one you would give your own.

Versioned secrets with per-environment scoping, synced into Kubernetes as native resources. Nothing is ever written in plaintext, and every read is audited.

Versioned & environment-scoped

Kubernetes sync

Never stored in plaintext

Every read audited

The AI cloud — one API for every capability. Open models. On-chain.

[Talk to us](https://hanzo.ai/contact/sales)[Source](https://github.com/hanzoai/kms)

## Start building with Secrets

[Get your API key](https://platform.hanzo.ai/api-keys)

One API key. One credit balance. Every primitive.

Related capabilities

[IAMOIDC identity & orgs](https://hanzo.ai/iam)[AuthzFine-grained access](https://hanzo.ai/authz)[KMSManaged keys](https://hanzo.ai/kms)