topic Re: Securely pass credentials to app functions? in Developer Q&A Forum

Securely pass credentials to app functions?

Dimitris_G-K — Thu, 02 Jul 2026 12:45:02 GMT

I'm building a Dynatrace app that includes a backend function which calls the Account Management API to fetch the DPS rate card. The function needs three credentials: `CLIENT_ID`, `CLIENT_SECRET`, and `ACCOUNT_URN`. I have tried with .env file (`dt-app` does not load it at runtime, the variables come back empty ), also with adding a `function.env` block to `app.config.json` (`CliOptions`reject it) and lastly the one that is working, hardcoding the values directly in the function file and adding it to `.gitignore`of course.

Is there an officially supported way to inject environment variables into Dynatrace app functions at deploy time, without hardcoding them in the source code?

Thanks a lot!

Re: Securely pass credentials to app functions?

DanielS — Fri, 03 Jul 2026 00:03:44 GMT

Hello @Dimitris_G-K you could define a settings schema.

Look for Use Secrets section.

{ "dynatrace": "1", "schemaId": "my-example-secrets", "version": "1.0.0", "displayName": "Allows you to configure connections to a fictional messaging service", "description": "", "multiObject": true, "maxObjects": 10, "maturity": "GENERAL_AVAILABILITY", "summaryPattern": "Messaging Service {url}", "ordered": false, "properties": { "isEnabled": { "displayName": "Enabled", "description": "Enable the integration of the messaging service", "type": "boolean", "default": false, "nullable": false }, "description": { "displayName": "Description of the connection", "type": "text", "default": "", "nullable": false }, "url": { "displayName": "URL", "description": "The URL of the messaging service", "type": "text", "default": "", "nullable": false, "forceSecretResubmission": true, "constraints": [ { "type": "PATTERN", "customMessage": "The URL must be secure (https://) and must not contain a trailing slash", "pattern": "^https://.*[^/]$" } ] }, "token": { "displayName": "Token", "description": "A secret token", "type": "secret", "default": "", "nullable": false } }, "constraints": [ { "type": "SECRET_RESUBMISSION", "customMessage": "For security reasons, please re-enter the token before saving the settings.", "checkAllProperties": false } ] }

Re: Securely pass credentials to app functions?

Dimitris_G-K — Fri, 03 Jul 2026 08:01:44 GMT

Thank you very much, I'll check it out!