secrets

Return a website approval URL so the account owner can grant a user-scoped secret to a saved package (one-click Allow...

Return a website approval URL so the account owner can grant a user-scoped secret to a saved package (one-click Allow, same spirit as /connect/secrets host approval). This capability does not change allowed_packages. Send the approval_url to the user and wait; never treat this call as a grant. Only the owner can add a grant at /@<slug>/-/secrets/approve or the secret editor. Removing a grant is also website-only. User secrets still allow execute and self-authored / adopted packages to read unless the owner tightens further on the account page. secretSet cannot change allowed_packages.

Org permission: secret:use.

post/v1/secrets/lock

Request

  • Base URL: https://api.kody.codes
  • URL: https://api.kody.codes/v1/secrets/lock
  • Auth: HTTP bearer

Request body

namestring required

User-scoped secret name to grant.

package_idstring required

Saved package id that may use this secret.

Response

Success.

namestring required
scope'user' required
allowed_packagesstring[] required
usage_urlstring required
status'approval_required' | 'already_granted' required
approval_urlstring required
messagestring required

Changes

No recorded changes to this operation across all 1 revision of this API.