Create a secret
Encrypts and stores a secret. Pass site_id to make one site own it, or omit it for a shared secret and list the sites it applies to in site_ids. The decrypted value comes back in this response only — later reads expose just last4.
Authorizations
API key in the format: Bearer {api_token}
Headers
Makes this write safe to retry: a repeat with the same key replays the first response instead of creating a second resource. Scoped to the account, remembered for 24 hours; reusing a key with a different payload is an error.
255Body
Environment-variable name (e.g. STRIPE_SECRET_KEY). Uppercase letters, digits and underscores; cannot start with a digit or use the reserved CREVIO_ prefix.
The secret value to encrypt.
Site that owns the secret. Omit for a shared, account-level secret.
Deployment target the secret applies to. Defaults to production.
preview, production Human-readable note about what this secret is for.
Sites a shared secret applies to. Empty leaves it dormant — stored, but injected nowhere.
Host the in-chat agent may call with this secret injected server-side. The value itself is never exposed to the model.
Header the secret rides in when calling egress_host (e.g. Authorization).
Response
The secret, including its decrypted value

