Secrets
HTTP API routes for secrets.
The org secret store behind ax://secrets/<slug> references (see
Environment and Auth). Values are write-only: no route
ever returns one.
| Route | Use | CLI equivalent |
|---|---|---|
GET /secrets | List secret metadata. | ax secret list --json |
PUT /secrets/{slug} | Create or update a value. | ax secret set |
DELETE /secrets/{slug} | Delete a secret. | ax secret delete --yes |
Every route takes org_id (required only when the key can see several orgs).
Parameters are optional unless marked required.
GET /api/v1/secrets
List secret metadata: slugs, descriptions, audit fields. Never values.
curl -H "Authorization: Bearer $AX_API_KEY" \
"https://app.514.ax/api/v1/secrets?page_size=50"| Parameter | What it does |
|---|---|
query | Text search. |
page_size / page_token | Pagination. |
PUT /api/v1/secrets/{slug}
Create or update a secret value.
curl -X PUT \
-H "Authorization: Bearer $AX_API_KEY" \
-H "Content-Type: application/json" \
-d '{"value":"sk-...","description":"Used by nightly evals"}' \
"https://app.514.ax/api/v1/secrets/github-token"| Body field | What it does |
|---|---|
value | Required. Non-empty string. Never returned by any route. |
description | Optional note. Omitting it clears any existing description. |
DELETE /api/v1/secrets/{slug}
Delete a secret. Deleting a missing slug is idempotent.
curl -X DELETE -H "Authorization: Bearer $AX_API_KEY" \
"https://app.514.ax/api/v1/secrets/github-token"