Skip to main content
POST
Atomically create or replace a batch of org Secrets.

Authorizations

Authorization
string
header
required

Opaque instabox access token (1 hour). Refresh with /v1/auth/refresh (refresh token valid 30 days, rotates on use).

Path Parameters

id
string
required

Organization ID.

Body

application/json
values
object
required

Names and values to replace atomically; omitted names stay unchanged. Null values are rejected.

delivery
enum<string>
required

Proxy supplies an opaque sandbox-specific placeholder for substitution in ordinary HTTPS headers on allowed hosts (port 443). Env supplies the real value, including credentials needed by native database clients. Unsupported traffic never falls back from proxy to env.

Available options:
proxy,
env
hosts
string[]

Exact ASCII DNS hostnames, normalized to lowercase without a trailing dot, or a standalone * for every public HTTPS destination. Omitted or empty for proxy delivery means ["*"]. No scheme, port, path, partial wildcard, IP literal, or local hostname. Destination checks also reject private and restricted resolved addresses. This scopes credential use, not all sandbox network access.

Maximum array length: 32
Maximum string length: 253

Response

Metadata of the imported Secrets, ordered by name.

items
object[]
required