Skip to main content
POST
Create secret

Authorizations

Authorization
string
header
required

An opaque Omnara personal or organization bearer token.

Path Parameters

orgID
string
required

Organization ID (org_...).

Pattern: ^org_[a-z2-7]{26}$

Body

application/json
owner
object
required

Who owns the secret: {"kind":"org"}, {"kind":"project","project_id":"proj_..."}, or {"kind":"user"}. The owner cannot change later.

name
string
required

Human-readable name. Spaces and punctuation are allowed; leading or trailing whitespace and invisible or control characters are not.

Required string length: 1 - 64
material
object
required

The secret's value. kind selects its shape: generic, oauth_token_set, aws_credentials, or github_app_credentials.

metadata
object

Arbitrary key-value metadata. Maximum 16 pairs, keys up to 64 characters, values must be strings of up to 512 characters.

Response

Secret created.

id
string
required

Secret ID (sec_...).

Pattern: ^sec_[a-z2-7]{26}$
org_id
string
required
Pattern: ^org_[a-z2-7]{26}$
management_kind
enum<string>
required

Lifecycle owner. Tenant-managed resources can be changed through tenant APIs. Cluster-managed resources are installed and lifecycle-managed by the control plane; individual APIs may explicitly expose tenant-editable settings.

Available options:
tenant,
cluster
owner
object
required
name
string
required

Human-readable name. Spaces and punctuation are allowed; leading or trailing whitespace and invisible or control characters are not.

Required string length: 1 - 64
kind
enum<string>
required
Available options:
generic,
oauth_token_set,
slack_app_credentials,
aws_credentials,
github_app_credentials
metadata
object
required

Arbitrary key-value metadata. Maximum 16 pairs, keys up to 64 characters, values must be strings of up to 512 characters.

current_version_number
integer<int32>
required
payload_keys
string[]
required
created_at
string<date-time>
required
updated_at
string<date-time>
required