---
title: "Create a secret"
method: POST
path: "/orgs/{orgName}/secrets"
tags: ["Secrets"]
---

# Create a secret

`POST /orgs/{orgName}/secrets`

## Request

- Base URL: `https://api.signadot.com/api/v2`
- URL: `https://api.signadot.com/api/v2/orgs/{orgName}/secrets`
- Auth: API key in header `signadot-api-key`

Create a new encrypted secret for the org.

## Path parameters

- `orgName` string, required

## Request body

- Secret
  - `createdAt` string: CreatedAt is when the secret was created. Read-only.
  - `description` string: Description is an optional human-readable description.
  - `name` string: Name is the unique identifier within the org.
  - `updatedAt` string: UpdatedAt is when the secret was last updated. Read-only.
  - `value` string: Value is the secret plaintext. Write-only: accepted on create/update, never returned in any API response.

## Response `200`

OK

- Secret
  - `createdAt` string: CreatedAt is when the secret was created. Read-only.
  - `description` string: Description is an optional human-readable description.
  - `name` string: Name is the unique identifier within the org.
  - `updatedAt` string: UpdatedAt is when the secret was last updated. Read-only.
  - `value` string: Value is the secret plaintext. Write-only: accepted on create/update, never returned in any API response.

## Other responses

- `400`: Bad Request
- `401`: Unauthorized

## Changes

- **2026-05-07** `942b3992433f`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/signadot/apis/signadot-api/changes/orgs/:orgName/secrets/post.md)

---

[API](https://skmtc.dev/signadot/apis/signadot-api.md) - [All operations](https://skmtc.dev/signadot/apis/signadot-api/llms.txt) - [OpenAPI document](https://skmtc.dev/signadot/apis/signadot-api/revisions/5e80b0f9c718?raw)