Keep shared configuration and private values in one place. Open Global at the top of an endpoint, function or event, or open the manager from Settings. The Variables and Secrets tabs belong to the selected workspace.
Use ordinary variables for reusable settings such as a default page size or service address. Use secrets for private values such as an external service's API key. Secret names can be selected in server workflows, but their saved values are never shown in the manager.
The Variables tab keeps the familiar typed editor. Add a field, choose its type, enter its value and save. Existing workflows continue to use references such as $global.default_page_size.
These values remain editable configuration. Hiding a text field on screen does not make it a protected secret. Keep credentials in Secrets instead. Changing a value during a workflow does not save a new workspace setting; edit the manager when you want to change the saved configuration.
Check the workspace name and Dev/Prod badge before entering a value.
Open Secrets and choose Add secret. The editor opens above the list, using the same name and value fields as other variables.
Enter a descriptive name, such as SERVICE_KEY. Use letters, numbers and underscores, beginning with a letter or underscore.
Enter the value and save. You can also save a name without a value to prepare it for later configuration.
A confirmation appears in the bottom notification bar after saving or removing a secret.
The list shows whether the secret is configured, together with its update time. It never displays the saved value, and there is no reveal button. A secret name stays the same after creation so existing workflow references remain clear. To use a different name, create a new secret and update the affected workflows.
Each workspace can hold up to 100 secrets. A value can contain up to 16 KiB of text. Do not paste a private value into the name, a workflow label or an ordinary variable.
The list shows configured values as Set and a prepared name without a value as Not set.
Choose Replace to enter a new value. The replacement field starts empty; leaving it empty keeps the saved value. After saving, the new value is available to subsequent runs without publishing every workflow again. A run that has already started continues with the values it loaded.
Use Remove when you intend to remove a secret, then confirm the change. A workflow that still requires it will need attention. Removing all ordinary globals does not remove secrets.
If another person changes the secret while you are editing, refresh its latest details before replacing it. Temporary values are cleared when you leave the editor or switch workspaces; enter the replacement again if needed. Only members allowed to manage the workspace can change its secrets.
Replacement starts with an empty value field. Leaving it blank keeps the saved value.
Choose a secret from the variable selector in a server workflow. References use $secrets.SERVICE_KEY; the ordinary variable prefix remains $global.
Select a secret by name without revealing its value. This example compares a test input with a workspace secret.
For example, select the secret as the value for an external service's authorization header. Keep the value out of the endpoint's response. Secrets are available to server workflows, including endpoints, functions, middleware and events. They are not available to browser/page workflows.
A secret without a configured value cannot satisfy a workflow that requires it. Configure it in that workspace before testing or enabling the workflow. Test runs use their selected workspace's secrets even when database records are isolated; an isolated test does not automatically select development credentials.
Give the same secret name different values in your existing Dev and Prod workspaces. For example, Dev can use a service's test key while Prod uses its live key. References remain the same, but each run resolves the selected workspace's own value. There is no fallback to another workspace.
Secrets do not need an extra workspace and do not increase your workspace limit. If your account is already at its limit, use an existing permitted test workspace. Changing a workspace's Dev/Prod label does not move, replace or choose a second set of secret values.
Secret values are not copied between workspaces, included in release comparisons or restored by rollback. A release checks that required secret names have configured values in its destination. Add or configure missing secrets there, then review the release again. A rollback restores workflow definitions while retaining the destination's current secrets.
Release review lists missing names so you can configure them in the destination before trying again. Values stay hidden.
Saved secret values stay hidden in management screens and are redacted from supported logs, traces and test diagnostics. This does not make every authored workflow safe: an endpoint can deliberately send a secret or a transformed value in its response or an external request. Review the fields you send and return, use sample keys when testing and replace a key if it is exposed.
Useful guides: Workspaces, Testing, Safer releases, Send an external request.
Safer Releases
Move a reviewed set of published workflows from a Dev workspace to a Prod workspace. Releases let you review the changes together, keep a release history and review a rollback if you need to restore the previous workflows. Prepare your workspaces. Use two existing workspaces in the same organization...
Working on smaller screens
Twidget adapts its navigation, lists and editing panels to phones, tablets and smaller laptop windows. You can use the same workspace and saved workflows across these views. Open your workspace tools. On a phone, use the menu button at the top to open workspace navigation. Choose a tool from Build, ...
Inputs
Overview. In Twidget, inputs are essential elements that allow you to configure endpoints and functions. Events do not use inputs. Endpoint Inputs. Endpoint inputs are used to retrieve data from requests. The available types of endpoint inputs are: 1. Path: Variables that are part of the URL path. 2...
Reusable Middleware
Middleware is a reusable workflow that runs before or after an endpoint, function or event. Build it once, then apply it wherever you need the same input checks, response formatting or logging. Create middleware. Open Middleware from the sidebar and choose Create Middleware. Give it a clear name, su...
Data Types
Twidget supports six main data types to facilitate interactions within the platform. These data types are essential for defining inputs, outputs, and table fields, helping users understand the nature of the data being handled. The available data types in Twidget are as follows: Text. - Description: ...
