---
title: "Store or replace an egress secret"
method: PUT
path: "/v2/secrets/{secret_id}"
tags: ["Secrets"]
---

# Store or replace an egress secret

`PUT /v2/secrets/{secret_id}`

## Request

- Base URL: `https://api.runta.com`
- URL: `https://api.runta.com/v2/secrets/{secret_id}`
- Auth: HTTP bearer

## Path parameters

- `secret_id` string, required: Secret UUID or display name.

## Request body

- SetSecretRequest: Secret set request.
  - `cache_ttl_secs` integer: Worker-side cache TTL in seconds.
  - `value` string, required: Secret value.

## Response `200`

Response envelope.

- SecretResponse: Response envelope.
  - `data` Secret, required: Secret response object.
    - `cache_ttl_secs` integer, required: Worker-side cache TTL in seconds.
    - `display_name` string, required: User-chosen display name.
    - `id` string, required: Stable secret UUID.
    - `value_preview` string: Server-masked preview (first and last chars) of the value, for display only. Never the full value.

## Other responses

- `401`: Missing, malformed, or rejected bearer token
- `403`: The bearer token is not allowed to perform this action
- `404`: The requested resource was not found
- `409`: The request conflicts with current resource state
- `422`: Validation or application error
- `429`: Rate limit exceeded
- `501`: Operation is not implemented
- `503`: Upstream service is unavailable
- `504`: Upstream request timed out
- `default`: Error response

## Changes

- **2026-11-05** `fb5a0ecd3fc2`: 20 warning
  - added the new `FEATURE_TEMPORARILY_DISABLED` enum value to the `error/code` response property for the response status `401`
  - added the new `FEATURE_TEMPORARILY_DISABLED` enum value to the `error/code` response property for the response status `403`
  - added the new `FEATURE_TEMPORARILY_DISABLED` enum value to the `error/code` response property for the response status `404`
  - added the new `FEATURE_TEMPORARILY_DISABLED` enum value to the `error/code` response property for the response status `409`
  - …16 more

[Operation history](https://skmtc.dev/runta/apis/runta-public-rest-api/changes/v2/secrets/:secret_id/put.md)

---

[API](https://skmtc.dev/runta/apis/runta-public-rest-api.md) - [All operations](https://skmtc.dev/runta/apis/runta-public-rest-api/llms.txt) - [OpenAPI document](https://skmtc.dev/runta/apis/runta-public-rest-api/revisions/fb5a0ecd3fc2?raw)