Skip to main content
GET
/
api
/
workflows
/
secrets
Workflow Secrets
curl --request GET \
  --url https://encrata.com/api/workflows/secrets \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '
{
  "name": "<string>",
  "value": "<string>"
}
'

Documentation Index

Fetch the complete documentation index at: https://docs.encrata.com/llms.txt

Use this file to discover all available pages before exploring further.

​
Authentication

Requires a JWT token or API key in the Authorization header. 
Authorization: Bearer YOUR_TOKEN

​
List Secrets

GET /api/workflows/secrets
Returns secret names only — values are never exposed.

​
Example response

{
  "secrets": [
    { "name": "SLACK_WEBHOOK_URL", "created_at": "2026-05-01T10:00:00Z" },
    { "name": "CRM_API_KEY", "created_at": "2026-05-15T08:00:00Z" }
  ]
}

​
Create Secret

POST /api/workflows/secrets
​
name
string
required
Secret name. Use in step configs as {{secrets.SLACK_WEBHOOK_URL}}.
​
value
string
required
Secret value. Encrypted at rest — cannot be retrieved after creation.

​
Example request

curl -X POST "https://encrata.com/api/workflows/secrets" \
  -H "Authorization: Bearer YOUR_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{ "name": "SLACK_WEBHOOK_URL", "value": "https://hooks.slack.com/services/..." }'

​
Example response

{
  "success": true,
  "name": "SLACK_WEBHOOK_URL"
}

​
Delete Secret

DELETE /api/workflows/secrets
​
name
string
required
Secret name to delete.

​
Example request

curl -X DELETE "https://encrata.com/api/workflows/secrets" \
  -H "Authorization: Bearer YOUR_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{ "name": "SLACK_WEBHOOK_URL" }'

​
Example response

{
  "success": true,
  "message": "Secret deleted"
}

​
Usage in Steps

Reference secrets in webhook step configs using the {{secrets.NAME}} syntax: 
{
  "id": "notify",
  "type": "webhook",
  "config": {
    "url": "{{secrets.SLACK_WEBHOOK_URL}}",
    "method": "POST",
    "headers": {
      "Authorization": "Bearer {{secrets.CRM_API_KEY}}"
    }
  }
}