---
title: "Create or replace a secret (idempotent)"
method: PUT
path: "/secrets/{name}"
tags: ["Secrets"]
---

# Create or replace a secret (idempotent)

`PUT /secrets/{name}`

## Request body

- PutSecretRequest
  - `value` string, required — Secret value (write-only, never echoed back).
  - `workflowId` string — ULID identifier (26-char Crockford base32).
  - `orgId` string

## Response `201`

Secret created.

## Other responses

- `204` — Secret replaced (already existed).
- `400` — Request validation failed.
- `401` — Missing or invalid bearer token.

---

[API](https://skmtc.net/avaprotocol/apis/ava-protocol-avs-api.md) · [All operations](https://skmtc.net/avaprotocol/apis/ava-protocol-avs-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/avaprotocol/ava-protocol-avs-api/versions/231d563f2c9f/schema)