---
title: "Project secrets & in-app AI"
description: "Store secrets safely and give your own app AI features through the Evonx AI gateway."
url: https://evonx.ai/docs/launch/secrets-and-in-app-ai
locale: en
updated: 2026-09-04
---

# Project secrets & in-app AI

Store secrets safely and give your own app AI features through the Evonx AI gateway.

Two settings live together because they solve the same problem: your app needs
credentials it must not leak. **Secrets** hold API keys and tokens. **In-app AI**
turns on Evonx's own AI gateway so the published app can call AI under your
quota, without you pasting a provider key into chat.

## Secrets

Open the project **Settings** and the secrets card. Values are write-only: you
save a key, and Evonx never shows it again (only a short hint). Replace a value
by saving over the same name.

1. Pick the environment: **Development** (previews) or **Live** (the published
   app). They are separate stores — a key you add in development does not appear
   in production until you add it there too.

2. Add the name and value the app expects. If the code already reads a name that
   has no value, it is listed under the table as missing — fill those first.

3. Public names (`VITE_`, `NEXT_PUBLIC_`, and similar) are labelled as public.
   Those values ship in the JavaScript every visitor downloads; they are
   configuration, not secrets.

> **Warning**
> Never paste API keys into chat. If a key leaked, revoke it at the provider
> first, then replace the secret here.

## In-app AI

When the platform has an AI provider configured, the same card offers a toggle
to **enable Evonx AI** for this app. The app then calls AI through Evonx's
gateway, metered against your workspace credits — see [pricing](/pricing).

Ask for the feature in an [Evolution Thread](/docs/evolve/evolution-threads)
("when a mechanic finishes a job, draft a customer-facing summary") and turn the
toggle on before you expect it to work in preview or production.

## Related

- [Managed database](/docs/launch/managed-database) — the other credential Evonx
  injects for you.
- [Add AI features to your own app](/docs/use-cases/add-ai-to-your-app) — the
  same idea as a worked outcome.