diff --git a/internal/schema/schemas/config.toml b/internal/schema/schemas/config.toml
index e32f22f11..eaecac0f9 100644
--- a/internal/schema/schemas/config.toml
+++ b/internal/schema/schemas/config.toml
@@ -11,6 +11,7 @@ files = [
     "*.qmd",
     "requirements.txt",
 ]
+secrets = ["API_KEY", "DATABASE_PASSWORD"]
 
 [python]
 version = "3.11.3"
diff --git a/internal/schema/schemas/posit-publishing-schema-v3.json b/internal/schema/schemas/posit-publishing-schema-v3.json
index 44f21d589..ea32fca1c 100644
--- a/internal/schema/schemas/posit-publishing-schema-v3.json
+++ b/internal/schema/schemas/posit-publishing-schema-v3.json
@@ -167,6 +167,14 @@
         }
       ]
     },
+    "secrets": {
+      "type": "array",
+      "items": {
+        "type": "string"
+      },
+      "description": "Names of secrets required by the application. Injected as environment variables.",
+      "examples": ["API_KEY", "DATABASE_PASSWORD"]
+    },
     "connect": {
       "type": "object",
       "additionalProperties": false,
diff --git a/internal/schema/schemas/record.toml b/internal/schema/schemas/record.toml
index c06afd35e..fa9fa1f15 100644
--- a/internal/schema/schemas/record.toml
+++ b/internal/schema/schemas/record.toml
@@ -22,6 +22,7 @@ files = [
     "*.qmd",
     "requirements.txt",
 ]
+secrets = ["API_KEY", "DATABASE_PASSWORD"]
 title = "Regional Quarterly Sales Report"
 description = "This is the quarterly sales report, broken down by region."