Create or update secret
PUT/v1/secrets
Upsert matched by key within the caller workspace — the rotation path, no id lookup needed. Creates with 201 when the key is new, replaces the value with 200 when it exists. The value is write-only: it is stored encrypted and is never returned by any endpoint. To rotate it, PATCH the row (or PUT by key) with a new value.
Request
Responses
- 200
- 201
- 400
- 401
- 403
- 404
- 409
- 422
Success.
Success.
Body failed Zod validation. error.details carries formErrors/fieldErrors.
Authentication failed (missing/invalid JWT or mTLS).
Authenticated but the scope is insufficient or the resource is out of reach.
Resource not found or filtered out by soft-delete.
Unique constraint violated (e.g. external_id or inbox email already in use).
Body validation that requires server-side context (e.g. inbox domain mismatch).