#Secrets

---

#GET /{o}/{p}/secrets/values

Which secrets have a value set

One row per declared secret: its name and whether a value has ever been stored for it. Never the value, and never the description — read declarations from GET /catalog?kind=Secret.

Auth: Bearer token required · Permission: secrets:read

Path parameters

Name	Type	Description
o	string
p	string

Responses

Status	Description	Schema
200	OK	SecretValueStatusList
401	Unauthorized	Error
403	Forbidden	Error

---

#GET /{o}/{p}/secrets/{name}/value

Whether one secret has a value set

The read mirror of PUT at this same path: whether a value has been stored, never what it is.

Auth: Bearer token required · Permission: secrets:read

Path parameters

Name	Type	Description
o	string
p	string
name	string

Responses

Status	Description	Schema
200	OK	SecretValueStatus
401	Unauthorized	Error
403	Forbidden	Error
404	Not Found	Error

---

#PUT /{o}/{p}/secrets/{name}/value

Set a secret value

Encrypt and store the secret value at rest. Requires the secrets:set-value permission.

Auth: Bearer token required · Permission: secrets:set-value

Path parameters

Name	Type	Description
o	string
p	string
name	string

Request body (application/json)

Field	Type	Description
value	string	Secret value (required)

Responses

Status	Description	Schema
200	OK	object
401	Unauthorized	Error
403	Forbidden	Error
404	Not Found	Error

#Schemas

#Error

Field	Type	Description
error	string	(required)
code	string

#SecretValueStatus

Field	Type	Description
name	string	(required)
hasValue	boolean	Whether PUT /secrets/:name/value has ever succeeded for this secret (required)
updatedAt	string | string | null	(required)

#SecretValueStatusList

Type: SecretValueStatus[]