---
title: "Create Secret"
method: POST
path: "/vault/v1/secrets/"
tags: ["Secrets"]
---

# Create Secret

`POST /vault/v1/secrets/`

## Request body

- CreateSecretDTO
  - `header` Header, required
    - `name` string, nullable
    - `description` string, nullable
  - `secret` SecretDTO, required
    - `kind` 'provider_key' | 'custom_provider' | 'sso_provider', required
    - `data` union, required
      - StandardProviderDTO
        - `kind` 'openai' | 'cohere' | 'anyscale' | 'deepinfra' | 'alephalpha' | 'groq' | 'mistral' | 'mistralai' | 'anthropic' | 'perplexityai' | 'together_ai' | 'openrouter' | 'gemini', required
        - `provider` StandardProviderSettingsDTO, required
          - `key` string, required
      - CustomProviderDTO
        - `kind` 'custom' | 'azure' | 'bedrock' | 'sagemaker' | 'vertex_ai' | 'openai' | 'cohere' | 'anyscale' | 'deepinfra' | 'alephalpha' | 'groq' | 'mistral' | 'mistralai' | 'anthropic' | 'perplexityai' | 'together_ai' | 'openrouter' | 'gemini', required
        - `provider` CustomProviderSettingsDTO, required
          - `url` string, nullable
          - `version` string, nullable
          - `key` string, nullable
          - `extras` object, nullable
        - `models` CustomModelSettingsDTO[], required
          - `slug` string, required
          - `extras` object, nullable
        - `provider_slug` string, nullable
        - `model_keys` string[], nullable
      - SSOProviderDTO
        - `provider` SSOProviderSettingsDTO, required
          - `client_id` string, required
          - `client_secret` string, required
          - `issuer_url` string, required
          - `scopes` string[], required
          - `extra` object

## Response `200`

Successful Response

- SecretResponseDTO
  - `kind` 'provider_key' | 'custom_provider' | 'sso_provider', required
  - `data` union, required
    - StandardProviderDTO
      - `kind` 'openai' | 'cohere' | 'anyscale' | 'deepinfra' | 'alephalpha' | 'groq' | 'mistral' | 'mistralai' | 'anthropic' | 'perplexityai' | 'together_ai' | 'openrouter' | 'gemini', required
      - `provider` StandardProviderSettingsDTO, required
        - `key` string, required
    - CustomProviderDTO
      - `kind` 'custom' | 'azure' | 'bedrock' | 'sagemaker' | 'vertex_ai' | 'openai' | 'cohere' | 'anyscale' | 'deepinfra' | 'alephalpha' | 'groq' | 'mistral' | 'mistralai' | 'anthropic' | 'perplexityai' | 'together_ai' | 'openrouter' | 'gemini', required
      - `provider` CustomProviderSettingsDTO, required
        - `url` string, nullable
        - `version` string, nullable
        - `key` string, nullable
        - `extras` object, nullable
      - `models` CustomModelSettingsDTO[], required
        - `slug` string, required
        - `extras` object, nullable
      - `provider_slug` string, nullable
      - `model_keys` string[], nullable
    - SSOProviderDTO
      - `provider` SSOProviderSettingsDTO, required
        - `client_id` string, required
        - `client_secret` string, required
        - `issuer_url` string, required
        - `scopes` string[], required
        - `extra` object
  - `id` string, uuid, nullable
  - `header` Header, required
    - `name` string, nullable
    - `description` string, nullable
  - `lifecycle` LegacyLifecycleDTO
    - `created_at` string, nullable
    - `updated_at` string, nullable
    - `updated_by_id` string, nullable
    - `updated_by` string, nullable

## Other responses

- `422` — Validation Error

## Changes

- **2026-02-13** `72fe88316d15` — 1 warning, 5 info
  - added the new `sso_provider` enum value to the `kind` response property for the response status `200`
  - added `#/components/schemas/SSOProviderDTO` to the `secret/data` request property `anyOf` list
  - added the new `sso_provider` enum value to the request property `secret/kind`
  - added the optional property `detail/items/ctx` to the response with the `422` status
  - …2 more
- **2026-01-14** `53da4c9de2b7` — 2 warning, 2 info
  - added the new `mistral` enum value to the `data/anyOf[subschema #1: StandardProviderDTO]/kind` response property for the response status `200`
  - added the new `mistral` enum value to the `data/anyOf[subschema #2: CustomProviderDTO]/kind` response property for the response status `200`
  - added the new `mistral` enum value to the request property `secret/data/anyOf[subschema #1: StandardProviderDTO]/kind`
  - added the new `mistral` enum value to the request property `secret/data/anyOf[subschema #2: CustomProviderDTO]/kind`
- **2025-11-05** `e62506c24377` — 1 breaking, 1 info
  - api path removed without deprecation
  - endpoint added
- …earlier changes not shown

[Full history](https://skmtc.dev/agenta-ai/apis/agenta-api/changes/vault/v1/secrets/post.md)

---

[API](https://skmtc.dev/agenta-ai/apis/agenta-api.md) · [All operations](https://skmtc.dev/agenta-ai/apis/agenta-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/agenta-ai/agenta-api/revisions/e4c4efcbd25d/schema)