Create a secret
POST
/v1/secrets
Store a value under a name your configuration can reference as ${secret.NAME}. Requires the admin scope — minting a credential store is an admin act, and it keeps a read/write key (the agent surface, ADR-0025) unable to plant one. The value is written to the platform secret store and is never returned again.
Authorizations
apiKey
Scoped API key. Scopes are read ⊂ write ⊂ admin. A call needing more scope than the key holds returns 403 insufficient_scope.
Type
HTTP (bearer)
Parameters
Header Parameters
Idempotency-Key
POST only. Duplicate requests with the same key within ~12–24 h return the original response and create no second effect.
Type
string
Format
"uuid"Request Body
application/json
JSON "name": "slack_token", "value": "string", "description": "Slack incoming-webhook token"
{
}
Responses
Created.
application/json
JSON "id": "sec_01JX9", "name": "slack_token", "description": "Slack incoming-webhook token", "version": 1, "created_at": "string", "updated_at": "string"
{
}