> ## Documentation Index
> Fetch the complete documentation index at: https://docs.ankra.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Set Application Env Secret

> Store the value of one environment secret, creating the entry or rotating it in place. The value goes to the platform secret store; the deploy renders it into the <app>-env Secret, encrypted with SOPS to the organisation's age recipient before it is stored or pushed to Git. The value is not echoed in the response and is never logged. Takes effect on the application's next deploy. A browser session twin is mounted at the same path without the /api/v1 prefix (cookie authentication plus the X-Ankra-CSRF double-submit header).



## OpenAPI

````yaml https://platform.ankra.app/openapi.json put /api/v1/org/applications/{application_id}/env-secrets/{secret_key}
openapi: 3.1.0
info:
  title: FastAPI
  version: 0.1.0
servers:
  - url: https://platform.ankra.app
security: []
paths:
  /api/v1/org/applications/{application_id}/env-secrets/{secret_key}:
    put:
      tags:
        - Applications API
      summary: Set Application Env Secret
      description: >-
        Store the value of one environment secret, creating the entry or
        rotating it in place. The value goes to the platform secret store; the
        deploy renders it into the <app>-env Secret, encrypted with SOPS to the
        organisation's age recipient before it is stored or pushed to Git. The
        value is not echoed in the response and is never logged. Takes effect on
        the application's next deploy. A browser session twin is mounted at the
        same path without the /api/v1 prefix (cookie authentication plus the
        X-Ankra-CSRF double-submit header).
      operationId: >-
        set_application_env_secret_api_v1_org_applications__application_id__env_secrets__secret_key__put
      parameters:
        - in: path
          name: application_id
          required: true
          schema:
            title: Application Id
            type: string
        - in: path
          name: secret_key
          required: true
          schema:
            title: Secret Key
            type: string
        - in: header
          name: authorization
          required: false
          schema:
            anyOf:
              - type: string
              - type: 'null'
            title: Authorization
        - in: header
          name: x-ankra-organisation-id
          required: false
          schema:
            anyOf:
              - type: string
              - type: 'null'
            title: X-Ankra-Organisation-Id
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/SetApplicationEnvSecretRequest'
        required: true
      responses:
        '200':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ApplicationEnvSecretItem'
          description: The catalogued key after the write. It carries no value.
        '400':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/DemoDetailError'
          description: >-
            The key is not a valid environment variable name, or the value
            failed the platform's secret-value rules
        '401':
          description: Unauthorized
        '403':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/DemoDetailError'
          description: CSRF check failed (browser twin only)
        '404':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/DemoDetailError'
          description: Not found ("Application not found")
        '422':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/HTTPValidationError'
          description: Validation Error
        '503':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/DemoDetailError'
          description: The secret store is not available ("Secret store is not available")
components:
  schemas:
    SetApplicationEnvSecretRequest:
      description: >-
        The value to store for one environment secret. It is write-only: it is
        never echoed by this response, returned by any read, or written to a
        log.
      properties:
        value:
          title: Value
          type: string
      required:
        - value
      title: SetApplicationEnvSecretRequest
      type: object
    ApplicationEnvSecretItem:
      description: >-
        One key of an application's <app>-env Secret. The stored value is never
        part of this model - no endpoint on this surface returns one.
      properties:
        key:
          title: Key
          type: string
        required:
          description: >-
            True when the application's committed manifests read this key
            through a secretKeyRef.
          title: Required
          type: boolean
        status:
          description: >-
            "set" when the secret store holds a value for this key,
            "value_missing" when the value was removed out of band.
          enum:
            - set
            - value_missing
          title: Status
          type: string
        updated_at:
          title: Updated At
          type: string
        updated_by:
          anyOf:
            - type: string
            - type: 'null'
          title: Updated By
      required:
        - key
        - required
        - status
        - updated_at
        - updated_by
      title: ApplicationEnvSecretItem
      type: object
    DemoDetailError:
      description: >-
        The FastAPI-style detail envelope the demo routes use for
        400/403/404/409/502 responses.
      properties:
        detail:
          type: string
      required:
        - detail
      type: object
    HTTPValidationError:
      properties:
        detail:
          items:
            $ref: '#/components/schemas/ValidationError'
          title: Detail
          type: array
      title: HTTPValidationError
      type: object
    ValidationError:
      properties:
        loc:
          items:
            anyOf:
              - type: string
              - type: integer
          title: Location
          type: array
        msg:
          title: Message
          type: string
        type:
          title: Error Type
          type: string
      required:
        - loc
        - msg
        - type
      title: ValidationError
      type: object

````