Skip to main content
POST
Create a secret

Authorizations

Authorization
string
header
required

API key in the format: Bearer {api_token}

Headers

Idempotency-Key
string

Makes this write safe to retry: a repeat with the same key replays the first response instead of creating a second resource. Scoped to the account, remembered for 24 hours; reusing a key with a different payload is an error.

Maximum string length: 255

Body

application/json
name
string
required

Environment-variable name (e.g. STRIPE_SECRET_KEY). Uppercase letters, digits and underscores; cannot start with a digit or use the reserved CREVIO_ prefix.

value
string
required

The secret value to encrypt.

site_id
string

Site that owns the secret. Omit for a shared, account-level secret.

target
enum<string>

Deployment target the secret applies to. Defaults to production.

Available options:
preview,
production
description
string

Human-readable note about what this secret is for.

site_ids
string[]

Sites a shared secret applies to. Empty leaves it dormant — stored, but injected nowhere.

egress_host
string

Host the in-chat agent may call with this secret injected server-side. The value itself is never exposed to the model.

egress_header
string

Header the secret rides in when calling egress_host (e.g. Authorization).

Response

The secret, including its decrypted value

object
string
required
id
string
required
name
string
required
target
string
required
scope
string
required
site_id
string | null
required
site_ids
object
required
description
string | null
required
egress_host
string | null
required
egress_header
string | null
required
last4
string
required
value
string | null
required
created_at
string
required