> ## Documentation Index
> Fetch the complete documentation index at: https://infisical.com/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# Variables

> Values you store once and use in any service in Agent Vault.

A global variable is a value that you can use in any [service](https://infisical.com/docs/documentation/platform/agent-vault/services.md) in Agent Vault, whichever [access bundle](https://infisical.com/docs/documentation/platform/agent-vault/access-bundles.md) the service is in. You define the variable once and give it a key, such as `GITHUB_TOKEN`. Then, any service can use the variable by referencing the key within double braces: `{{GITHUB_TOKEN}}`.

When an agent sends a request, the [proxy](https://infisical.com/docs/documentation/platform/agent-vault/proxies.md) replaces each reference with the variable's value.

> [!NOTE]
>
> Only [Agent Vault admins](https://infisical.com/docs/documentation/platform/agent-vault/access-control.md#product-membership) can view and update global variables.

## Add a variable

To add a variable:

**Step 1**

In Agent Vault, go to **Variables** and select the **Global Variables** tab.

![The Variables page with no variables and an Add Variable button](https://mintlify.s3.us-west-1.amazonaws.com/infisical/images/platform/agent-vault/variables-empty.png)

**Step 2**

Select **Add Global Variable**.

![The Add Variable dialog with GITHUB\_TOKEN as the key and a hidden value](https://mintlify.s3.us-west-1.amazonaws.com/infisical/images/platform/agent-vault/variable-create.png)

**Step 3**

Enter a **Key** and a **Value**. To view the value later, select the eye icon next to it. Each time someone views or copies a value, Infisical adds an event to the audit log.

> [!NOTE]
>
> A key can be up to 64 characters long. It must start with a letter and use only uppercase letters, numbers, and underscores. No two global variables can have the same key.

**Step 4**

Select **Add Global Variable**. The variable appears in the list on the **Global Variables** tab.

![The Variables page listing seven variables with hidden values. The Used By column shows access bundle badges, such as code-review, on-call, and release-notes for GITHUB\_TOKEN, with a tooltip listing the github service in code-review. SLACK\_BOT\_TOKEN shows three badges and +1 for one more access bundle. SENTRY\_AUTH\_TOKEN shows Unused.](https://mintlify.s3.us-west-1.amazonaws.com/infisical/images/platform/agent-vault/variables.png)

> [!NOTE]
>
> Agent Vault can hold up to 500 global variables.

## Use a variable in a service

You can use a variable in the following fields when [configuring a service](https://infisical.com/docs/documentation/platform/agent-vault/services.md#add-a-service):

* **Token** in a [Bearer](https://infisical.com/docs/documentation/platform/agent-vault/services.md#bearer) credential
* **Username** and **Password** in a [Basic](https://infisical.com/docs/documentation/platform/agent-vault/services.md#basic) credential
* **Value** in a [custom header](https://infisical.com/docs/documentation/platform/agent-vault/services.md#custom-headers)
* **With** in a [substitution](https://infisical.com/docs/documentation/platform/agent-vault/services.md#substitutions)

To use a variable:

**Step 1**

[Add a service](https://infisical.com/docs/documentation/platform/agent-vault/services.md#add-a-service), or open an existing service's actions menu and select **Edit**. Then go to the **Credential** step.

**Step 2**

In a field that accepts variables, type `{{`. A list of your variables appears.

![The Credential step of a GitHub service, with a partly typed reference in the Token field and a list showing GITHUB\_TOKEN and Create GITHUB\_](https://mintlify.s3.us-west-1.amazonaws.com/infisical/images/platform/agent-vault/service-variable-picker.png)

**Step 3**

Select a variable from the list. Infisical inserts the reference, such as `{{GITHUB_TOKEN}}`.

> [!TIP]
>
> You can also create a variable without leaving the service. Type its key, then select **Create** at the end of the list. The **Add Global Variable** dialog opens with the key filled in, so you only need to enter a **Value**.

![The Credential step of a GitHub service with a GITHUB\_TOKEN reference as the Token, and the Sends preview showing the reference after Authorization: Bearer](https://mintlify.s3.us-west-1.amazonaws.com/infisical/images/platform/agent-vault/service-variable-reference.png)

A reference can fill a whole field or part of one. For example, if a custom header's **Value** is `org-{{ORG_ID}}`, the proxy sends `org-` followed by the value of `ORG_ID`.

## Check variable usage

To check which services are using a variable:

**Step 1**

In Agent Vault, go to **Variables**.

**Step 2**

In the variable's **Used By** column, hover over an access bundle to see which of the access bundle's services use the variable.

## Update a variable

To update a variable:

**Step 1**

In Agent Vault, go to **Variables**.

**Step 2**

Open the variable's actions menu and select **Edit**.

**Step 3**

Update the key or the value. Leave **Value** blank to keep the current value.

**Step 4**

Select **Save**.

> [!NOTE]
>
> If you rename a variable, the services that use it keep working without changes. If you change a variable's value, the proxy starts using the new value within one [poll interval](https://infisical.com/docs/documentation/platform/agent-vault/proxies.md#poll-interval) (60 seconds by default), so you don't need to restart running agents.

## Delete a variable

To delete a variable:

**Step 1**

In Agent Vault, go to **Variables**.

**Step 2**

Open the variable's actions menu and select **Delete**.

**Step 3**

Select **Delete Variable**.

> [!NOTE]
>
> If any service still uses the variable, the dialog lists those services, and you can't delete the variable until you [remove the reference](#use-a-variable-in-a-service) from each one.

## Personal variables

A personal variable works like a global variable, with two differences: only your [personal values](https://infisical.com/docs/documentation/platform/agent-vault/access-bundles.md#set-up-your-personal-values) can use it, and only you can read it. Use one when several services ask you for the same value, such as a personal GitHub token that services in two access bundles require.

To see your personal variables, go to **Variables** in Agent Vault. If you're an admin, select the **Personal Variables** tab.

You add, update, and delete personal variables the same way as [global variables](#add-a-variable), with these limits:

* You can keep up to 100 personal variables
* A personal variable's key only has to be unique among your own personal variables (it can match a global variable's key, or another member's)
* If your personal values for a service use a variable, you can't delete the variable until you remove it from the service


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.