Skip to main content

​
list

List secrets (metadata only; values are never returned).

​
Options

​
TEXT
Filter JSON output with a jq expression; implies —output json (or jsonl for streamed commands)
​
TEXT
default:"text"
Output formatOne of: text, json, jsonl, none
​
TEXT
Use a specific stored profile for this command, overriding BASETEN_PROFILE and the current profile
​
TEXT
Filter to a specific team by name or ID. Defaults to all teams the caller belongs to.
​
BOOL
Enable verbose logging

​
Examples

List secrets across all accessible teams
List secrets in a specific team

​
Filter output with --jq

Print just the secret names

​
Output

Text mode (--output text): Table with columns: NAME, TEAM, CREATED. When no secrets exist, prints “No secrets found.” to stderr. JSON mode (--output json): payload type managementapi.Secrets.

​
set

Create or update a secret. The value is read from stdin (or prompted interactively on a TTY). --value is supported but discouraged: it leaks the secret into shell history and ps output. Pass --team to target a specific team; without it the organization’s default team is used.

​
Options

​
TEXT
Filter JSON output with a jq expression; implies —output json (or jsonl for streamed commands)
​
TEXT
required
Name of the secret.
​
TEXT
default:"text"
Output formatOne of: text, json, jsonl, none
​
TEXT
Use a specific stored profile for this command, overriding BASETEN_PROFILE and the current profile
​
TEXT
Team name or ID the secret belongs to. Defaults to the organization’s default team.
​
TEXT
Secret value. Discouraged: leaks into shell history and process list. Prefer stdin or prompt.
​
BOOL
Enable verbose logging

​
Examples

Set a secret by piping its value through stdin
Set a secret scoped to a specific team

​
Filter output with --jq

Print the secret’s team

​
Output

Text mode (--output text): Prints “Set secret name” to stderr on success; no stdout output. JSON mode (--output json): payload type managementapi.Secret.

​
delete

Delete a secret by name.

​
Options

​
TEXT
Filter JSON output with a jq expression; implies —output json (or jsonl for streamed commands)
​
TEXT
required
Name of the secret to delete.
​
TEXT
default:"text"
Output formatOne of: text, json, jsonl, none
​
TEXT
Use a specific stored profile for this command, overriding BASETEN_PROFILE and the current profile
​
TEXT
Team name or ID the secret belongs to. Defaults to the organization’s default team.
​
BOOL
Enable verbose logging

​
Examples

Delete a secret by name

​
Filter output with --jq

Print just the deleted secret name

​
Output

Text mode (--output text): Prints “Deleted secret name” to stderr on success; no stdout output. JSON mode (--output json): payload type managementapi.SecretTombstone.