Replace secret value

PUT

/secret-store/secrets/:secret_id/value

Creates a new version of the secret value. Requires scope: secret-store.write.

Authentication

AuthorizationBearer

IBEE platform API token. Production tokens start with ibee_prod_key_; development tokens start with ibee_dev_key_. Use a token only with its matching gateway environment.

Path parameters

secret_idstringRequired

Secret ID.

Query parameters

workspace_idstringRequiredformat: "^[1-9][0-9]*$">=1 character

The positive numeric workspace ID to scope this request to. Zero, negative, and non-numeric values are rejected.

Request

This endpoint expects an object.

valuemap from strings to anyRequired

Key-value pairs containing the new secret data. Creates a new version.

casinteger or nullOptional

Check-and-set: only update if the current version matches this number. Prevents overwriting concurrent changes.

Response

Secret value updated successfully.

idstringOptional

secret_namestringOptional

datamap from strings to anyOptional

Key-value pairs containing the secret data.

metadatamap from strings to anyOptional

Errors

400

Bad Request Error

401

Unauthorized Error

403

Forbidden Error

404

Not Found Error

$	curl -X PUT "https://api.ibee.ai/v1/secret-store/secrets/019f1e4b-4a2c-71d0-a8b3-c5f92e7d1a4b/value?workspace_id=710995" \
>	-H "Authorization: Bearer <token>" \
>	-H "Content-Type: application/json" \
>	-d '{
>	"value": {
>	"url": "postgres://user:updated@host:5432/mydb"
>	},
>	"cas": 1
>	}'

1	{
2	"id": "secret_123",
3	"secret_name": "database-url",
4	"data": {
5	"url": "postgres://user:pass@host:5432/mydb"
6	},
7	"metadata": {
8	"version": 1,
9	"created_time": "2026-06-29T00:00:00Z"
10	}
11	}