# Secrets — Hanzo Cloud

> Versioned secrets with per-environment scoping, synced into Kubernetes as native resources. Nothing is ever written in plaintext, and every read is audited.

[Cloud](https://hanzo.ai/products)/Security

Generally available

# Secrets

Store once, sync everywhere.

[Talk to us](https://hanzo.ai/contact-sales)[Source](https://github.com/hanzoai/kms)

Open sourceOn-chain settlement

API

/v1/kms

Google Cloud

Secret Manager

Secrets — Hanzo

[IAM](https://hanzo.ai/iam)[Authz](https://hanzo.ai/authz)[KMS](https://hanzo.ai/kms)[Secrets](https://hanzo.ai/cloud/secrets)[Audit](https://hanzo.ai/cloud/audit)[Zero Trust](https://hanzo.ai/cloud/zero-trust)

- gatewayReady
- payments-apiReady
- checkout-webBuilding
- docs-siteReady

Every request enters here, so the limiter does too.

`api.hanzo.ai/v1/kms`[Open in the console](https://hanzo.ai/home)

Example project. Every name in it is one you would give your own.

Paste and ship

Paste this into any agent. It reads the skill manifest and calls Secrets from there.

Agent promptapi /v1/kmsCopy

```
Read https://hanzo.ai/skill.md and use Hanzo Secrets in my project. Start with: hanzo kms secrets create
```

Versioned secrets with per-environment scoping, synced into Kubernetes as native resources. Nothing is ever written in plaintext, and every read is audited.

Versioned & environment-scoped

Kubernetes sync

Never stored in plaintext

Every read audited

A human signs a company into existence. After genesis, agents can run it.

Related capabilities

[IAMOIDC identity & orgs](https://hanzo.ai/iam)[AuthzFine-grained access](https://hanzo.ai/authz)[KMSManaged keys](https://hanzo.ai/kms)