---
title: "Create an org-level secret"
method: POST
path: "/v3/organizations/{org_id}/secrets"
tags: ["secrets"]
---

# Create an org-level secret

`POST /v3/organizations/{org_id}/secrets`

Create a secret for an organization.

## Path parameters

- `org_id` string, required

## Request body

- SecretCreateRequest
  - `is_sensitive` boolean
  - `key` string, required
  - `note` string, nullable
  - `type` 'cookie' | 'key-value' | 'totp', required
  - `value` string, required

## Response `200`

Successful Response

- SecretResponse
  - `access_type` 'org' | 'personal', required
  - `created_at` integer, required
  - `created_by` string, required
  - `is_sensitive` boolean, required
  - `key` string, nullable, required
  - `note` string, nullable, required
  - `secret_id` string, required
  - `secret_type` 'cookie' | 'key-value' | 'totp', required
  - `updated_at` integer, nullable
  - `updated_by` string, nullable

## Other responses

- `401` — Unauthorized
- `403` — Forbidden
- `404` — Not Found
- `409` — Conflict
- `422` — Unprocessable Content
- `429` — Too Many Requests

---

[API](https://skmtc.net/devin/apis/devin-api-v1.md) · [All operations](https://skmtc.net/devin/apis/devin-api-v1/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/devin/devin-api-v1/versions/e3244476af1c/schema)