---
title: "Add a secret to a site"
method: POST
path: "/sites/{id}/secrets"
tags: ["Sites"]
---

# Add a secret to a site

`POST /sites/{id}/secrets`

## Request

- Base URL: `https://api.crevio.co/v1`
- URL: `https://api.crevio.co/v1/sites/{id}/secrets`
- Auth: API key in header `Authorization`

Encrypts and stores a new secret on this site, then injects it into the live site as an environment variable (asynchronously, if the site is deployed). The decrypted `value` is returned only in this response — store it if you need it, as later list responses expose just `last4`. Names must be valid environment-variable identifiers and may not use the reserved `CREVIO_` prefix.

## Path parameters

- `id` string, required

## Headers

- `Idempotency-Key` string

## Request body

- object
  - `name` string, required: Environment-variable name (e.g. STRIPE_SECRET_KEY). Uppercase letters, digits, and underscores; cannot start with a digit or use the reserved CREVIO_ prefix.
  - `value` string, required: The secret value to encrypt and inject.
  - `description` string: Optional human-readable note about what this secret is for.

## Response `201`

Secret created (includes the decrypted value)

- Secret
  - `object` string, required
  - `id` string, required
  - `name` string, required
  - `target` string, required
  - `scope` string, required
  - `site_id` string, nullable, required
  - `site_ids` object, required
  - `description` string, nullable, required
  - `egress_host` string, nullable, required
  - `egress_header` string, nullable, required
  - `egress_placement` string, required
  - `egress_signing` object, required
  - `egress_default_headers` object, required
  - `last4` string, required
  - `value` string, nullable, required
  - `created_at` string, required

## Other responses

- `400`: Bad request
- `401`: Authentication required
- `404`: Resource not found
- `422`: Validation error
- `429`: Rate limit exceeded — 600 requests per minute per credential. Retry after the number of seconds in `Retry-After`.

---

[API](https://skmtc.dev/crevio/apis/crevio-api-v1.md) · [All operations](https://skmtc.dev/crevio/apis/crevio-api-v1/llms.txt) · [OpenAPI document](https://skmtc.dev/crevio/apis/crevio-api-v1/revisions/2219f18ad651?raw)