oss).
List Secrets
Example
Response
Get Secret
Sensitive fields are always masked as
••••••••: any field whose name (case-insensitive, ignoring _/-) contains password, passwd, pwd, secret, token, key, credential, signature, bearer, or private — e.g. apiKey, secretKey, accessKey. Non-sensitive fields show their actual values.
Example
Response
Error
Returns404 if the secret does not exist.
Update Secret
Create or update a secret.
Updating an existing secret replaces its fields with the body you send, with one safeguard: sending the
•••••••• mask (or any empty string) for a sensitive field keeps its current value, so you can add or correct one field without re-entering credentials. To remove a field, omit its key from the body. The shared ai-keys store is the exception: fields you omit are kept, and an empty string clears a field.
