---
title: "Create secret"
method: POST
path: "/secrets"
tags: ["Secrets"]
---

# Create secret

`POST /secrets`

## Request

- Base URL: `https://cloud.laravel.com/api`
- URL: `https://cloud.laravel.com/api/secrets`
- Auth: HTTP bearer

Create a new secret for the authenticated organization.

The value must be sealed with the public key of the submitted key pair, both of which are
returned by the secrets public key endpoint, before it is submitted.

## Request body

- StoreSecretRequest
  - `key_pair_id` string, required
  - `key` string, required
  - `value` string, required
  - `notes` string, nullable

## Response `201`

`SecretResource`

- object
  - `data` SecretResource, required
    - `id` string, required
    - `type` 'secrets', required
    - `attributes` object
      - `key` string, required
      - `notes` string, nullable, required
      - `created_at` string, date-time, nullable, required
      - `updated_at` string, date-time, nullable, required
    - `relationships` object
      - `environments` object
        - `data` EnvironmentResourceIdentifier[], required
          - `type` 'environments', required
          - `id` string, required
  - `included` EnvironmentResource[]
    - `id` string, required
    - `type` 'environments', required
    - `attributes` object
      - `name` string, required
      - `slug` string, required
      - `status` 'deploying' | 'running' | 'hibernating' | 'stopped', required
      - `color` 'blue' | 'green' | 'orange' | 'purple' | 'red' | 'yellow' | 'cyan' | 'gray', required
      - `created_from_automation` boolean, required
      - `vanity_domain` string, required
      - `framework` 'laravel' | 'symfony' | 'jigsaw' | 'html' | 'php' | 'express' | 'hono' | 'nuxt' | 'next' | 'tanstack' | 'elysia' | 'nestjs' | 'astro' | 'javascript' | 'go' | 'hugo' | 'ruby' | 'rails' | 'jekyll' | 'django' | 'fastapi' | 'flask' | 'pelican' | 'python' | 'java' | 'spring' | 'rust' | 'zola' | 'axum' | 'rocket' | 'actix' | 'warp', required
      - `language` 'html' | 'php' | 'javascript' | 'python' | 'go' | 'ruby' | 'java' | 'rust', required
      - `php_major_version` string, required
      - `serving` string
      - `build_command` string, nullable, required
      - `node_version` '20' | '22' | '24' | '26', required
      - `deploy_command` string, nullable, required
      - `start_command` string, nullable, required
      - `uses_octane` boolean, required
      - `uses_hibernation` boolean, required
      - `hibernation_wake_up_interval` integer, nullable, required
      - `timeout` integer, required: The number of seconds the environment will wait for your application to respond before timing out. Changes take effect on the next deployment.
      - `shutdown_timeout` integer, required: The number of seconds to wait before stopping the previous deployment's compute instances, allowing it to finish processing requests and jobs after a new deployment becomes active. Changes take effect on the next deployment.
      - `uses_push_to_deploy` boolean, required
      - `uses_deploy_hook` boolean, required
      - `resend` object, nullable, required
        - `from_address` string, required
        - `from_name` string, required
        - `key_name` string, required
      - union
        - object
          - `environment_variables` object[], required
            - `key` string, required
            - `value` string, required
        - string[]
      - `network_settings` object, required
        - `cache` object, required
          - `strategy` string, required
        - `response_headers` object, required
          - `frame` string, required
          - `content_type` string, required
          - `hsts` object, required
            - `max_age` integer, required
            - `include_subdomains` boolean, required
            - `preload` boolean, required
        - `firewall` object, required
          - `bot_categories` BotControlCategory[], required
          - `rate_limit` object, required
            - `429` boolean, required
            - `level` 'challenge' | 'throttle' | 'ban', required
            - `per_minute` 100 | 300 | 500 | 750 | 1000, required
            - `4xx` boolean, required
          - `under_attack_mode_started_at` string, required
          - `block_path` boolean, required
        - `content_converter` boolean, required
      - `created_at` string, date-time, nullable, required
    - `relationships` object
      - `application` object
        - `data` ApplicationResourceIdentifier, required
          - `type` 'applications', required
          - `id` string, required
      - `branch` object
        - `data` BranchResourceIdentifier, required
          - `type` 'branches', required
          - `id` string, required
      - `deployments` object
        - `data` DeploymentResourceIdentifier[], required
          - `type` 'deployments', required
          - `id` string, required
      - `currentDeployment` object
        - `data` DeploymentResourceIdentifier, required
          - `type` 'deployments', required
          - `id` string, required
      - `domains` object
        - `data` DomainResourceIdentifier[], required
          - `type` 'domains', required
          - `id` string, required
      - `primaryDomain` object
        - `data` DomainResourceIdentifier, required
          - `type` 'domains', required
          - `id` string, required
      - `instances` object
        - `data` InstanceResourceIdentifier[], required
          - `type` 'instances', required
          - `id` string, required
      - `database` object
        - `data` DatabaseSchemaResourceIdentifier, required
          - `type` 'databaseSchemas', required
          - `id` string, required
      - `cache` object
        - `data` CacheResourceIdentifier, required
          - `type` 'caches', required
          - `id` string, required
      - `buckets` object
        - `data` FilesystemResourceIdentifier[], required
          - `type` 'filesystems', required
          - `id` string, required
      - `websocketApplication` object
        - `data` WebsocketApplicationResourceIdentifier, required
          - `type` 'websocketApplications', required
          - `id` string, required
      - `secrets` object
        - `data` SecretResourceIdentifier[], required
          - `type` 'secrets', required
          - `id` string, required
    - `links` object, required
      - `self` Link, required
        - `href` string, uri, required
        - `rel` string
        - `describedby` string
        - `title` string
        - `type` string
        - `hreflang` union
          - string
          - string[]
        - `meta` object

## Other responses

- `401`: An error
- `403`: Authorization error
- `422`: Validation error

---

[API](https://skmtc.dev/laravel/apis/laravel-cloud.md) - [All operations](https://skmtc.dev/laravel/apis/laravel-cloud/llms.txt) - [OpenAPI document](https://skmtc.dev/laravel/apis/laravel-cloud/revisions/af603f54ff33?raw)