Skip to content
Thyme Docs

Secrets

List secret metadata

GET/api/v1/secrets

Required scope: secrets:read.

Query Parameters

projectIdRequired
string

Header Parameters

X-Workspace-Id
string

Required for an unbound key; a management credential is already workspace-bound.

Responses

Create project secret

POST/api/v1/secrets

Required scope: secrets:write. Owner/admin membership is required.

Header Parameters

X-Workspace-Id
string

Required for an unbound key; a management credential is already workspace-bound.

Idempotency-Key
string·min 1·max 128

Opaque 1–128 character key retained for 24 hours. Use a different key for every target resource and intended mutation: some fingerprints use the route template without the resource ID.

Request Body

application/json
projectIdRequired
string
keyRequired
string
valueRequired
string

Responses

Rotate project secret

PATCH/api/v1/secrets/{secretId}

Required scope: secrets:write. Owner/admin membership is required.

Path Parameters

secretIdRequired
string

Header Parameters

X-Workspace-Id
string

Required for an unbound key; a management credential is already workspace-bound.

Idempotency-Key
string·min 1·max 128

Opaque 1–128 character key retained for 24 hours. Use a different key for every target resource and intended mutation: some fingerprints use the route template without the resource ID.

Request Body

application/json
valueRequired
string

Responses

Delete project secret

DELETE/api/v1/secrets/{secretId}

Required scope: secrets:write. Owner/admin membership is required.

Path Parameters

secretIdRequired
string

Header Parameters

X-Workspace-Id
string

Required for an unbound key; a management credential is already workspace-bound.

Idempotency-Key
string·min 1·max 128

Opaque 1–128 character key retained for 24 hours. Use a different key for every target resource and intended mutation: some fingerprints use the route template without the resource ID.

Responses