Create secret
POST/v1/secrets
Store a secret an agent workflow can reference as ${{secrets.KEY}}. A duplicate key in the workspace is refused with 409 conflict. The value is write-only: it is stored encrypted and is never returned by any endpoint. To rotate it, PATCH the row (or PUT by key) with a new value.
Request
Responses
- 201
- 400
- 401
- 403
- 404
- 409
- 422
Success.
Body failed Zod validation. error.details carries formErrors/fieldErrors.
Authentication failed (missing/invalid JWT or mTLS).
Authenticated but the scope is insufficient or the resource is out of reach.
Resource not found or filtered out by soft-delete.
Unique constraint violated (e.g. external_id or inbox email already in use).
Body validation that requires server-side context (e.g. inbox domain mismatch).