Related guides
Endpoints
Next steps
- API overview: base URLs, authentication, and pagination
- Errors: status codes and the error format
- Editions: which endpoints each edition serves
Secrets
Organization secrets API: Share Keys Across Workspaces
Create, list, update, and delete organization secrets with the OneCLI API. One shared credential reaches every workspace, and agents never see its value.
Organization secrets are credentials, such as an API key or an LLM key, that an admin stores once and shares into every workspace in the organization. Any agent can then be granted the secret, and the gateway injects it into matching requests without the agent ever reading the value.
Use these endpoints to manage the shared pool from scripts or CI. For secrets that belong to a single workspace, use the Secrets endpoints. To decide which agents may use a secret, see Agent access.