# Secrets: Using them

> Where {{NAME}} is substituted.

Glider documentation · Data · Web page: https://cgglider.com/docs/secrets/using/

Sections of this page: [Managing secrets](https://cgglider.com/docs/secrets.md) · [Using them](https://cgglider.com/docs/secrets/using.md) · [Security model](https://cgglider.com/docs/secrets/security.md)

Secrets are interpolated into a poller's URL, its header values and its raw body at request time, and into a WebSocket feed’s URL, headers and subscribe message.

```http
GET https://api.example.com/scores?key={{SPORTS_API_KEY}}
Authorization: Bearer {{SPORTS_TOKEN}}
```

- Referencing a name that does not exist throws “Unknown secret: <name>” — the request is not sent with a hole in it.
- Client-runtime units cannot resolve secrets at all.
- Deleting a secret breaks every poller that references it, with that same error.