Skip to main content
Settings let people change an app’s text, colors, location, and behavior from Niblet. The saved values arrive in main(config) whenever the app renders.

Read saved settings

Always provide a useful default so the app can render before setup is complete.

Show settings in Niblet

Use get_schema() to define the controls people see when they configure your app:
You can add text, toggles, dropdowns, colors, dates, locations, photos, and connected services. See the schema reference for every available field. Some connections require a provider supported by Niblet Cloud.

Keep secrets separate

Never put passwords or API tokens in source code or default values. Credential fields are stored separately and are not returned through MCP. OAuth connections are configured by Niblet Cloud and exposed to apps only while they render. Declare each secret text field in manifest.yaml, including who supplies it:
The same field must use secret = True in get_schema(). After the first push, set a publisher-owned value with niblet apps secrets set api_key. Niblet asks each installer for user-owned values separately. network_hosts is the exact HTTPS host allowlist requested for hosted rendering.
Do not log the complete configuration object. It may contain a person’s location or other private content.
Last modified on September 2, 2026