---
title: "Update secret"
method: PATCH
path: "/secrets/{secret}"
tags: ["Secrets"]
---

# Update secret

`PATCH /secrets/{secret}`

## Request

- Base URL: `https://cloud.laravel.com/api`
- URL: `https://cloud.laravel.com/api/secrets/{secret}`
- Auth: HTTP bearer

Update a secret. A new value must be sealed with the public key of the submitted key pair
before it is submitted.

## Path parameters

- `secret` string, required

## Request body

- UpdateSecretRequest
  - `key_pair_id` string
  - `key` string, required
  - `value` string, nullable
  - `notes` string, nullable

## Response `200`

`SecretResource`

- object
  - `data` SecretResource, required
    - `id` string, required
    - `type` 'secrets', required
    - `attributes` object
      - `key` string, required
      - `notes` string, nullable, required
      - `created_at` string, date-time, nullable, required
      - `updated_at` string, date-time, nullable, required
    - `relationships` object
      - `environments` object
        - `data` EnvironmentResourceIdentifier[], required
          - `type` 'environments', required
          - `id` string, required
  - `included` EnvironmentResource[]
    - `id` string, required
    - `type` 'environments', required
    - `attributes` object
      - `name` string, required
      - `slug` string, required
      - `status` 'deploying' | 'running' | 'hibernating' | 'stopped', required
      - `color` 'blue' | 'green' | 'orange' | 'purple' | 'red' | 'yellow' | 'cyan' | 'gray', required
      - `created_from_automation` boolean, required
      - `vanity_domain` string, required
      - `framework` 'laravel' | 'symfony' | 'jigsaw' | 'html' | 'php' | 'express' | 'hono' | 'nuxt' | 'next' | 'tanstack' | 'elysia' | 'nestjs' | 'astro' | 'javascript' | 'go' | 'hugo' | 'ruby' | 'rails' | 'jekyll' | 'django' | 'fastapi' | 'flask' | 'pelican' | 'python' | 'java' | 'spring' | 'rust' | 'zola' | 'axum' | 'rocket' | 'actix' | 'warp', required
      - `language` 'html' | 'php' | 'javascript' | 'python' | 'go' | 'ruby' | 'java' | 'rust', required
      - `php_major_version` string, required
      - `serving` string
      - `build_command` string, nullable, required
      - `node_version` '20' | '22' | '24' | '26', required
      - `deploy_command` string, nullable, required
      - `start_command` string, nullable, required
      - `uses_octane` boolean, required
      - `uses_hibernation` boolean, required
      - `hibernation_wake_up_interval` integer, nullable, required
      - `timeout` integer, required: The number of seconds the environment will wait for your application to respond before timing out. Changes take effect on the next deployment.
      - `shutdown_timeout` integer, required: The number of seconds to wait before stopping the previous deployment's compute instances, allowing it to finish processing requests and jobs after a new deployment becomes active. Changes take effect on the next deployment.
      - `uses_push_to_deploy` boolean, required
      - `uses_deploy_hook` boolean, required
      - `resend` object, nullable, required
        - `from_address` string, required
        - `from_name` string, required
        - `key_name` string, required
      - union
        - object
          - `environment_variables` object[], required
            - `key` string, required
            - `value` string, required
        - string[]
      - `network_settings` object, required
        - `cache` object, required
          - `strategy` string, required
        - `response_headers` object, required
          - `frame` string, required
          - `content_type` string, required
          - `hsts` object, required
            - `max_age` integer, required
            - `include_subdomains` boolean, required
            - `preload` boolean, required
        - `firewall` object, required
          - `bot_categories` BotControlCategory[], required
          - `rate_limit` object, required
            - `429` boolean, required
            - `level` 'challenge' | 'throttle' | 'ban', required
            - `per_minute` 100 | 300 | 500 | 750 | 1000, required
            - `4xx` boolean, required
          - `under_attack_mode_started_at` string, required
          - `block_path` boolean, required
        - `content_converter` boolean, required
      - `created_at` string, date-time, nullable, required
    - `relationships` object
      - `application` object
        - `data` ApplicationResourceIdentifier, required
          - `type` 'applications', required
          - `id` string, required
      - `branch` object
        - `data` BranchResourceIdentifier, required
          - `type` 'branches', required
          - `id` string, required
      - `deployments` object
        - `data` DeploymentResourceIdentifier[], required
          - `type` 'deployments', required
          - `id` string, required
      - `currentDeployment` object
        - `data` DeploymentResourceIdentifier, required
          - `type` 'deployments', required
          - `id` string, required
      - `domains` object
        - `data` DomainResourceIdentifier[], required
          - `type` 'domains', required
          - `id` string, required
      - `primaryDomain` object
        - `data` DomainResourceIdentifier, required
          - `type` 'domains', required
          - `id` string, required
      - `instances` object
        - `data` InstanceResourceIdentifier[], required
          - `type` 'instances', required
          - `id` string, required
      - `database` object
        - `data` DatabaseSchemaResourceIdentifier, required
          - `type` 'databaseSchemas', required
          - `id` string, required
      - `cache` object
        - `data` CacheResourceIdentifier, required
          - `type` 'caches', required
          - `id` string, required
      - `buckets` object
        - `data` FilesystemResourceIdentifier[], required
          - `type` 'filesystems', required
          - `id` string, required
      - `websocketApplication` object
        - `data` WebsocketApplicationResourceIdentifier, required
          - `type` 'websocketApplications', required
          - `id` string, required
      - `secrets` object
        - `data` SecretResourceIdentifier[], required
          - `type` 'secrets', required
          - `id` string, required
    - `links` object, required
      - `self` Link, required
        - `href` string, uri, required
        - `rel` string
        - `describedby` string
        - `title` string
        - `type` string
        - `hreflang` union
          - string
          - string[]
        - `meta` object

## Other responses

- `403`: Authorization error
- `404`: Not found
- `422`: Validation error

---

[API](https://skmtc.dev/laravel/apis/laravel-cloud.md) - [All operations](https://skmtc.dev/laravel/apis/laravel-cloud/llms.txt) - [OpenAPI document](https://skmtc.dev/laravel/apis/laravel-cloud/revisions/af603f54ff33?raw)