Secrets

The organization's write-only secret store: API keys of the models your agents and campaigns use, referenced as ${NAME} in their configuration. Values can be set and replaced, never read back.

📄️List secrets

Returns the names of the organization's secrets, with who created them and when, 10 per page (`page`). Values are never returned. Accepts an API key or a login token.

📄️Set a secret

Stores a new secret in the caller's organization, encrypted. Agents and campaigns reference it as `${NAME}` in an `api_key`; cloud runs receive its value when they are claimed, and nothing else can read it back. 400 when the name is invalid or already used (replace a value with `PUT /secret/{name}`); 403 when the caller has no organization.

📄️Replace a secret's value

Replaces the value of an existing secret of the organization. Runs claimed from now on get the new value.

📄️Delete a secret

Deletes a secret of the organization, even when configs still reference it: the response lists the agents and campaigns whose config names it, which will fail to launch on the cloud until it is set again.