---
title: "Prepare an owner-authenticated secret entry link"
method: POST
path: "/platform/secret-entries"
tags: ["Platform"]
---

# Prepare an owner-authenticated secret entry link

`POST /platform/secret-entries`

## Request

- Base URL: `https://api.imprezahost.com/v1`
- URL: `https://api.imprezahost.com/v1/platform/secret-entries`
- Auth: API key in header `X-API-Key` and API key in header `X-API-Secret`

Deploy scope. Send only deployment_id and variable_name, or project_id with optional environment_id and variable_name. Never a secret value. Links expire after ten minutes, require the same account owner login and can be consumed once. Stored values apply on the next deployment. This form does not scan or protect secrets embedded in YAML, Dockerfile contents, source code or free text. Never paste such values into chat or tool arguments; rotate any value already disclosed.

## Request body

- object
  - `deployment_id` string
  - `project_id` string
  - `environment_id` string
  - `variable_name` string, required

## Response `201`

Session ID, expiry and clearnet/onion portal links; no secret value

## Other responses

- `400`: Invalid target or unsupported setting
- `403`: Issuing credential lacks current owner or deployment permission
- `429`: Account session creation limit reached

---

[API](https://skmtc.dev/imprezahost/apis/impreza-host-public-api.md) · [All operations](https://skmtc.dev/imprezahost/apis/impreza-host-public-api/llms.txt) · [OpenAPI document](https://skmtc.dev/imprezahost/apis/impreza-host-public-api/revisions/db86511f604f?raw)