Skip to main content

list

List secrets (metadata only; values are never returned).

Options

TEXT
Filter JSON output with a jq expression; implies —output json (or jsonl for streamed commands)
TEXT
default:"text"
Output formatOne of: text, json, jsonl, none
TEXT
Use a specific stored profile for this command, overriding BASETEN_PROFILE and the current profile
TEXT
Filter to a specific team by name or ID. Defaults to all teams the caller belongs to.
BOOL
Enable verbose logging

Examples

List secrets across all accessible teams
List secrets in a specific team

Filter output with --jq

Print just the secret names

Output

Text mode (--output text): Table with columns: NAME, TEAM, CREATED. When no secrets exist, prints “No secrets found.” to stderr. JSON mode (--output json): payload type managementapi.Secrets.

set

Create or update a secret. The value is read from stdin (or prompted interactively on a TTY). --value is supported but discouraged: it leaks the secret into shell history and ps output. Pass --team to target a specific team; without it the organization’s default team is used.

Options

TEXT
Filter JSON output with a jq expression; implies —output json (or jsonl for streamed commands)
TEXT
required
Name of the secret.
TEXT
default:"text"
Output formatOne of: text, json, jsonl, none
TEXT
Use a specific stored profile for this command, overriding BASETEN_PROFILE and the current profile
TEXT
Team name or ID the secret belongs to. Defaults to the organization’s default team. Run ‘baseten org team list’ to see teams.
TEXT
Secret value. Discouraged: leaks into shell history and process list. Prefer stdin or prompt.
BOOL
Enable verbose logging

Examples

Set a secret by piping its value through stdin
Set a secret scoped to a specific team

Filter output with --jq

Print the secret’s team

Output

Text mode (--output text): Prints “Set secret name” to stderr on success; no stdout output. JSON mode (--output json): payload type managementapi.Secret.

delete

Delete a secret by name.

Options

TEXT
Filter JSON output with a jq expression; implies —output json (or jsonl for streamed commands)
TEXT
required
Name of the secret to delete.
TEXT
default:"text"
Output formatOne of: text, json, jsonl, none
TEXT
Use a specific stored profile for this command, overriding BASETEN_PROFILE and the current profile
TEXT
Team name or ID the secret belongs to. Defaults to the organization’s default team. Run ‘baseten org team list’ to see teams.
BOOL
Enable verbose logging

Examples

Delete a secret by name

Filter output with --jq

Print just the deleted secret name

Output

Text mode (--output text): Prints “Deleted secret name” to stderr on success; no stdout output. JSON mode (--output json): payload type managementapi.SecretTombstone.