Skip to main content
POST
cURL

Authorizations

Authorization
string
header
required

Hiloop API key sent as an HTTP Bearer token.

Body

application/json
name
string

The secret name — unique within the caller's organization.

value
string

The secret value. WRITE-ONLY: stored encrypted for proof-bound delivery and never returned by these management APIs.

dest_host
string

The exact public HTTPS destination. Must be a bare DNS hostname such as api.openai.com, not a URL or IP address; stored in canonical lowercase form. Must be empty for sandbox-environment delivery.

delivery
enum<string>

The only trusted data plane allowed to release this secret. Defaults to generic secret egress.

Available options:
SANDBOX_SECRET_DELIVERY_UNSPECIFIED,
SANDBOX_SECRET_DELIVERY_SECRET_EGRESS,
SANDBOX_SECRET_DELIVERY_MODEL_GATEWAY,
SANDBOX_SECRET_DELIVERY_SANDBOX_ENVIRONMENT

Response

OK

secret
object

The created secret's metadata. The value is NOT echoed back.