POST /rotated-secret-create-openai

Admin API key value to rotate (relevant only for rotator-type=api-key)

Admin API key ID to rotate (relevant only for rotator-type=api-key)

Enable or disable Agentic Runtime Authority rule enforcement for this item. When false, user-defined input/output rules are stored but not enforced; the base security validation still runs.

AraEnabled is tri-state (nil/true/false), not a plain bool: it self-encodes its wire value (see akl.OptionalBool) so an explicit false survives the curl-proxy relay instead of being dropped like a default-false bool flag.

The credentials to connect with use-user-creds/use-target-creds

Protection from accidental deletion of this object [true/false]

Description of the object

EnableAra is the documented spelling of AraEnabled. Both set the same field; --ara-enabled shipped first and stays as an undocumented alias so existing scripts and the Terraform provider keep working.

Turns on AI Quorum checks for this item.

Set output format to JSON

Lock this secret after each successful value read

Lock TTL in minutes

Set the maximum number of versions, limited by the account settings defaults.

Rotated secret name

The length of the password to be generated

Rotate this secret after it is unlocked

The rotator type. options: [target/api-key]

If set, dry-run will be skipped [true/false]

The target name to associate

Authentication token (see /auth and /configure)

The universal identity token, Required only for universal_identity authentication

Specifies whether the generated temporary password must contain at least one uppercase character from the ISO basic Latin alphabet (A to Z). [true/false]

Specifies whether the generated temporary password must contain at least one lowercase character from the ISO basic Latin alphabet (a to z). [true/false]

Specifies whether the generated temporary password must contain at least one numeric character (0 to 9). [true/false]