Skip to main content
Vault has a single page - /vault - a list of every secret you’ve created. There’s no separate create, edit, or detail page: creating and editing both happen through the same pop-up dialog on the list page.

The Vault list

The list shows four columns:
  • Key - the secret’s identifier.
  • Created By - who created the secret.
  • Last Updated On - the formatted date it was last saved, or - if it hasn’t been updated.
  • Actions - an edit (pencil) icon that opens the edit dialog, and a delete (trash) icon.
Before any secrets exist, the page shows a “Get Started with Vault” empty state describing Vault as a centralized secret management system to store, retrieve, and manage your secrets, track secret usage, manage variables, and easily retrieve secrets across your applications - alongside four feature highlights: Secure Storage, API Access, User Tracking, and Update History. The page header has a Learn more button that links to this documentation, and a Create new button. Create new only appears once your database connection is healthy.

Creating a secret

  1. Click Create new. This opens the Create a new secret dialog.
  2. Fill in the fields:
    • Key - only capital letters, digits, and underscores are allowed. As you type, OpenLIT auto-formats the value: spaces become underscores, letters are uppercased, and any other character is stripped. This is the only required field.
    • Value - your secret value, shown as a password-style input. You can leave this blank and save a secret with no value at all - useful as a placeholder you fill in later.
    • Tags - optional free-form tags to help you find and filter the secret later.
  3. Click Create secret.
While the request is in flight, OpenLIT shows a “Creating secret…” toast. On success you’ll see “Created secret successfully!”; on failure, “Creation of secret failed!”. If you reuse a Key that already exists, creation fails with “Secret name is taken!”.

Editing a secret

Click the edit (pencil) icon on a row to open the Update a secret dialog.
  • Key is read-only once a secret exists, with the hint “Cannot update the key” - you can’t rename a secret after creating it.
  • Value is always shown blank when you open the dialog, since OpenLIT never sends a stored value back to the browser. Leave it blank to keep the existing value unchanged, or type a new value to overwrite it. There’s no way to view a secret’s current value in the UI once it’s saved - this is by design, see Security.
  • Tags can be changed freely.
Click Update secret to save. You’ll see the same “Creating secret…” loading toast, followed by “Updated secret successfully!” or “Updation of secret failed!”.

Deleting a secret

Click the delete (trash) icon on a row. You’ll be asked to confirm: “Are you sure you want to delete this secret?”, with the warning “Deleting secrets might result in breaking application if they are getting used. Please confirm before deleting it.” Deleting is permanent - any application still fetching that Key will start failing to find it.

Using Vault secrets elsewhere in OpenLIT

You don’t always need to visit the Vault page first. The Evaluation configuration screen, the Chat settings screen, and OpenGround’s provider configuration each have an “API Key (from Vault)” field that lets you pick an existing Vault secret, or create a new one on the spot, without leaving that screen.