pinecall secrets

$ printf %s "$CRM_TOKEN" | pinecall secrets set CRM_TOKEN --prod
CRM_TOKEN kept · the org's hosted apps here start again with it
$ pinecall secrets --prod
CRM_TOKEN   2026-09-30 13:22  m_ana

What the org's hosted apps are started with, as environment variables: the org's, per environment, so every app deploy put there starts with all of them. A name is an environment variable's (CRM_TOKEN), never one starting with PINECALL_ — the platform sets PINECALL_KEY and PINECALL_URL itself. The value is typed without echo, or piped; it never goes on the command line, where the shell would keep it. The gateway keeps it sealed and nothing reads it back: list shows names, who set each and when. Setting or dropping one starts every app of the org in that environment again, the old process answering until the new one registers. rm <NAME> drops one.