Set a secret
POST/secret
Stores a new secret in the caller's organization, encrypted. Agents and campaigns reference it as ${NAME} in an api_key; cloud runs receive its value when they are claimed, and nothing else can read it back. 400 when the name is invalid or already used (replace a value with PUT /secret/{name}); 403 when the caller has no organization.
Request
Responses
- 201
- 400
- 401
- 403
- 429
- 503
Created
Invalid name, or the name exists.
Missing, invalid, expired or revoked credential, or a credential this endpoint does not accept.
The credential may not do this (for example a run token outside its own run, or a caller without an organization), or the installation is read-only because its license is not valid (code: license_read_only).
Rate limited: retry after the number of seconds in the Retry-After header.
The secret store is not configured on this installation.