---
title: "Delete a workspace secret"
method: DELETE
path: "/sandboxes/secrets/{name}"
tags: ["Sandboxes"]
---

# Delete a workspace secret

`DELETE /sandboxes/secrets/{name}`

## Request

- Base URL: `https://api.hedra.com/v3`
- URL: `https://api.hedra.com/v3/sandboxes/secrets/{name}`
- Auth: one of:
  - API key in header `Authorization`
  - HTTP bearer

Delete a secret. Only a workspace owner or admin can delete one.

## Path parameters

- `name` string, required: The secret's name.

## Response `200`

Successful Response

- SandboxSecret: A workspace secret: its name only, since the value never comes back.
  - `name` string, required: The secret's name.
  - `created_at` string, date-time, required

## Other responses

- `400`: Invalid or failed-validation request.
- `401`: Authentication failed: missing, malformed, or invalid credentials.
- `403`: Insufficient scope or plan. `PERMISSION_DENIED`: you are not an owner or admin of the workspace. A workspace service key never is.
- `404`: Your workspace has no sandbox account, or holds no secret of this name.
- `429`: Rate limit exceeded.
- `500`: Internal error.
- `503`: Sandboxes are temporarily unavailable, or are still being set up for your workspace; retry shortly.

## Changes

- **2026-10-23** `e733493214f4`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/hedra-labs/apis/hedra-api/changes/sandboxes/secrets/:name/delete.md)

---

[API](https://skmtc.dev/hedra-labs/apis/hedra-api.md) - [All operations](https://skmtc.dev/hedra-labs/apis/hedra-api/llms.txt) - [OpenAPI document](https://skmtc.dev/hedra-labs/apis/hedra-api/revisions/6ef35a11cefe?raw)