store a secret for the machine

Creates the secret or replaces its value, bumping version either way. A running machine takes delivery within seconds; a stopped one takes it on the next boot.

PUT/v1/machines/{machine_id}/secrets

Authorization

AuthorizationBearer token · headerrequired

an organization api key. browser clients use the session cookie instead.

computer_sessionAPI key · cookierequired

first-party httponly browser session; never readable from javascript.

Path parameters

machine_idstringrequired

matches ^mch_[0-9a-z]{20,32}$

Header parameters

idempotency-keystring

min length 1 · max length 255

Request body

requiredapplication/json

namestringrequired

min length 1 · max length 128 · matches ^[A-Z_][A-Z0-9_]*$

valuestringrequired

the secret value; stored encrypted and never returned

min length 1 · max length 65536

Responses

200OK

idstringrequired

machine secret identifier

matches ^sec_[0-9a-z]{20,32}$

organization_idstringrequired

organization identifier

matches ^org_[0-9a-z]{20,32}$

machine_idstringrequired

machine identifier

matches ^mch_[0-9a-z]{20,32}$

namestringrequired

min length 1 · max length 128

versionintegerrequired

min -9007199254740991 · max 9007199254740991

delivered_atstring<date-time> | anyrequired

Show properties

Any of:

string<date-time>

string<date-time>

any

any

created_atstring<date-time>required

updated_atstring<date-time>required

400invalid request

errorobjectrequired

Show properties

codeErrorCoderequired

Allowed:invalid_requestunauthenticatedpermission_deniednot_foundconflictprecondition_failedquota_exceededrate_limitedunsupported_operationinternal_errorcompute_unavailable

messagestringrequired

human-readable, not machine-parseable

request_idstringrequired

detailsFieldError[]

Show properties

Array of FieldError

fieldstringrequired

dotted path into the request body

messagestringrequired

quotaobject

Show properties

limitstringrequired

the entitlement that declined this request

currentintegerrequired

min 0 · max 9007199254740991

maximuminteger | anyrequired

Show properties

Any of:

integer

integer

any

any

plan_idstringrequired

upgrade_urlstring | anyrequired

Show properties

Any of:

string

string

any

any

401unauthenticated

errorobjectrequired

Show properties

codeErrorCoderequired

Allowed:invalid_requestunauthenticatedpermission_deniednot_foundconflictprecondition_failedquota_exceededrate_limitedunsupported_operationinternal_errorcompute_unavailable

messagestringrequired

human-readable, not machine-parseable

request_idstringrequired

detailsFieldError[]

Show properties

Array of FieldError

fieldstringrequired

dotted path into the request body

messagestringrequired

quotaobject

Show properties

limitstringrequired

the entitlement that declined this request

currentintegerrequired

min 0 · max 9007199254740991

maximuminteger | anyrequired

Show properties

Any of:

integer

integer

any

any

plan_idstringrequired

upgrade_urlstring | anyrequired

Show properties

Any of:

string

string

any

any

402quota exceeded

errorobjectrequired

Show properties

codeErrorCoderequired

Allowed:invalid_requestunauthenticatedpermission_deniednot_foundconflictprecondition_failedquota_exceededrate_limitedunsupported_operationinternal_errorcompute_unavailable

messagestringrequired

human-readable, not machine-parseable

request_idstringrequired

detailsFieldError[]

Show properties

Array of FieldError

fieldstringrequired

dotted path into the request body

messagestringrequired

quotaobject

Show properties

limitstringrequired

the entitlement that declined this request

currentintegerrequired

min 0 · max 9007199254740991

maximuminteger | anyrequired

Show properties

Any of:

integer

integer

any

any

plan_idstringrequired

upgrade_urlstring | anyrequired

Show properties

Any of:

string

string

any

any

403permission denied

errorobjectrequired

Show properties

codeErrorCoderequired

Allowed:invalid_requestunauthenticatedpermission_deniednot_foundconflictprecondition_failedquota_exceededrate_limitedunsupported_operationinternal_errorcompute_unavailable

messagestringrequired

human-readable, not machine-parseable

request_idstringrequired

detailsFieldError[]

Show properties

Array of FieldError

fieldstringrequired

dotted path into the request body

messagestringrequired

quotaobject

Show properties

limitstringrequired

the entitlement that declined this request

currentintegerrequired

min 0 · max 9007199254740991

maximuminteger | anyrequired

Show properties

Any of:

integer

integer

any

any

plan_idstringrequired

upgrade_urlstring | anyrequired

Show properties

Any of:

string

string

any

any

404not found

errorobjectrequired

Show properties

codeErrorCoderequired

Allowed:invalid_requestunauthenticatedpermission_deniednot_foundconflictprecondition_failedquota_exceededrate_limitedunsupported_operationinternal_errorcompute_unavailable

messagestringrequired

human-readable, not machine-parseable

request_idstringrequired

detailsFieldError[]

Show properties

Array of FieldError

fieldstringrequired

dotted path into the request body

messagestringrequired

quotaobject

Show properties

limitstringrequired

the entitlement that declined this request

currentintegerrequired

min 0 · max 9007199254740991

maximuminteger | anyrequired

Show properties

Any of:

integer

integer

any

any

plan_idstringrequired

upgrade_urlstring | anyrequired

Show properties

Any of:

string

string

any

any

409conflict with current state

errorobjectrequired

Show properties

codeErrorCoderequired

Allowed:invalid_requestunauthenticatedpermission_deniednot_foundconflictprecondition_failedquota_exceededrate_limitedunsupported_operationinternal_errorcompute_unavailable

messagestringrequired

human-readable, not machine-parseable

request_idstringrequired

detailsFieldError[]

Show properties

Array of FieldError

fieldstringrequired

dotted path into the request body

messagestringrequired

quotaobject

Show properties

limitstringrequired

the entitlement that declined this request

currentintegerrequired

min 0 · max 9007199254740991

maximuminteger | anyrequired

Show properties

Any of:

integer

integer

any

any

plan_idstringrequired

upgrade_urlstring | anyrequired

Show properties

Any of:

string

string

any

any

412precondition failed

errorobjectrequired

Show properties

codeErrorCoderequired

Allowed:invalid_requestunauthenticatedpermission_deniednot_foundconflictprecondition_failedquota_exceededrate_limitedunsupported_operationinternal_errorcompute_unavailable

messagestringrequired

human-readable, not machine-parseable

request_idstringrequired

detailsFieldError[]

Show properties

Array of FieldError

fieldstringrequired

dotted path into the request body

messagestringrequired

quotaobject

Show properties

limitstringrequired

the entitlement that declined this request

currentintegerrequired

min 0 · max 9007199254740991

maximuminteger | anyrequired

Show properties

Any of:

integer

integer

any

any

plan_idstringrequired

upgrade_urlstring | anyrequired

Show properties

Any of:

string

string

any

any

429rate limited

errorobjectrequired

Show properties

codeErrorCoderequired

Allowed:invalid_requestunauthenticatedpermission_deniednot_foundconflictprecondition_failedquota_exceededrate_limitedunsupported_operationinternal_errorcompute_unavailable

messagestringrequired

human-readable, not machine-parseable

request_idstringrequired

detailsFieldError[]

Show properties

Array of FieldError

fieldstringrequired

dotted path into the request body

messagestringrequired

quotaobject

Show properties

limitstringrequired

the entitlement that declined this request

currentintegerrequired

min 0 · max 9007199254740991

maximuminteger | anyrequired

Show properties

Any of:

integer

integer

any

any

plan_idstringrequired

upgrade_urlstring | anyrequired

Show properties

Any of:

string

string

any

any

500internal error

errorobjectrequired

Show properties

codeErrorCoderequired

Allowed:invalid_requestunauthenticatedpermission_deniednot_foundconflictprecondition_failedquota_exceededrate_limitedunsupported_operationinternal_errorcompute_unavailable

messagestringrequired

human-readable, not machine-parseable

request_idstringrequired

detailsFieldError[]

Show properties

Array of FieldError

fieldstringrequired

dotted path into the request body

messagestringrequired

quotaobject

Show properties

limitstringrequired

the entitlement that declined this request

currentintegerrequired

min 0 · max 9007199254740991

maximuminteger | anyrequired

Show properties

Any of:

integer

integer

any

any

plan_idstringrequired

upgrade_urlstring | anyrequired

Show properties

Any of:

string

string

any

any

501unsupported operation

errorobjectrequired

Show properties

codeErrorCoderequired

Allowed:invalid_requestunauthenticatedpermission_deniednot_foundconflictprecondition_failedquota_exceededrate_limitedunsupported_operationinternal_errorcompute_unavailable

messagestringrequired

human-readable, not machine-parseable

request_idstringrequired

detailsFieldError[]

Show properties

Array of FieldError

fieldstringrequired

dotted path into the request body

messagestringrequired

quotaobject

Show properties

limitstringrequired

the entitlement that declined this request

currentintegerrequired

min 0 · max 9007199254740991

maximuminteger | anyrequired

Show properties

Any of:

integer

integer

any

any

plan_idstringrequired

upgrade_urlstring | anyrequired

Show properties

Any of:

string

string

any

any

503compute unavailable

errorobjectrequired

Show properties

codeErrorCoderequired

Allowed:invalid_requestunauthenticatedpermission_deniednot_foundconflictprecondition_failedquota_exceededrate_limitedunsupported_operationinternal_errorcompute_unavailable

messagestringrequired

human-readable, not machine-parseable

request_idstringrequired

detailsFieldError[]

Show properties

Array of FieldError

fieldstringrequired

dotted path into the request body

messagestringrequired

quotaobject

Show properties

limitstringrequired

the entitlement that declined this request

currentintegerrequired

min 0 · max 9007199254740991

maximuminteger | anyrequired

Show properties

Any of:

integer

integer

any

any

plan_idstringrequired

upgrade_urlstring | anyrequired

Show properties

Any of:

string

string

any

any

Try it

Server

Base URLCustom base URLOverrides the selected server when set.

Authorization

Bearer tokenRemember on this deviceInclude my values in samples

Parameters

machine_idpath*idempotency-keyheader

Bodyapplication/json

namestring*valuestring*the secret value; stored encrypted and never returned

Request

curl -X PUT "https://api.raster.sh/v1/v1/machines/mch_01h8xk2q4v9m3n7p5r0t/secrets" \
  -H "Authorization: Bearer YOUR_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{
  "name": "GITHUB_TOKEN",
  "value": "string"
}'

const response = await fetch("https://api.raster.sh/v1/v1/machines/mch_01h8xk2q4v9m3n7p5r0t/secrets", {
  method: "PUT",
  headers: {
    "Authorization": "Bearer YOUR_TOKEN",
    "Content-Type": "application/json"
  },
  body: JSON.stringify({
  "name": "GITHUB_TOKEN",
  "value": "string"
})
});

import requests

response = requests.put(
    "https://api.raster.sh/v1/v1/machines/mch_01h8xk2q4v9m3n7p5r0t/secrets",
    headers={
        "Authorization": "Bearer YOUR_TOKEN",
        "Content-Type": "application/json"
    },
    json={
  "name": "GITHUB_TOKEN",
  "value": "string"
},
)

Response

{
  "id": "sec_01h8xk2q4v9m3n7p5r0t",
  "organization_id": "org_01h8xk2q4v9m3n7p5r0t",
  "machine_id": "mch_01h8xk2q4v9m3n7p5r0t",
  "name": "string",
  "version": -9007199254740991,
  "delivered_at": "2026-08-19T12:00:00Z",
  "created_at": "2026-08-19T12:00:00Z",
  "updated_at": "2026-08-19T12:00:00Z"
}

{
  "error": {
    "code": "invalid_request",
    "message": "string",
    "request_id": "string",
    "details": [
      {
        "field": "string",
        "message": "string"
      }
    ],
    "quota": {
      "limit": "running_machines",
      "current": 9007199254740991,
      "maximum": 9007199254740991,
      "plan_id": "string",
      "upgrade_url": "string"
    }
  }
}

{
  "error": {
    "code": "invalid_request",
    "message": "string",
    "request_id": "string",
    "details": [
      {
        "field": "string",
        "message": "string"
      }
    ],
    "quota": {
      "limit": "running_machines",
      "current": 9007199254740991,
      "maximum": 9007199254740991,
      "plan_id": "string",
      "upgrade_url": "string"
    }
  }
}

{
  "error": {
    "code": "invalid_request",
    "message": "string",
    "request_id": "string",
    "details": [
      {
        "field": "string",
        "message": "string"
      }
    ],
    "quota": {
      "limit": "running_machines",
      "current": 9007199254740991,
      "maximum": 9007199254740991,
      "plan_id": "string",
      "upgrade_url": "string"
    }
  }
}

{
  "error": {
    "code": "invalid_request",
    "message": "string",
    "request_id": "string",
    "details": [
      {
        "field": "string",
        "message": "string"
      }
    ],
    "quota": {
      "limit": "running_machines",
      "current": 9007199254740991,
      "maximum": 9007199254740991,
      "plan_id": "string",
      "upgrade_url": "string"
    }
  }
}

{
  "error": {
    "code": "invalid_request",
    "message": "string",
    "request_id": "string",
    "details": [
      {
        "field": "string",
        "message": "string"
      }
    ],
    "quota": {
      "limit": "running_machines",
      "current": 9007199254740991,
      "maximum": 9007199254740991,
      "plan_id": "string",
      "upgrade_url": "string"
    }
  }
}

{
  "error": {
    "code": "invalid_request",
    "message": "string",
    "request_id": "string",
    "details": [
      {
        "field": "string",
        "message": "string"
      }
    ],
    "quota": {
      "limit": "running_machines",
      "current": 9007199254740991,
      "maximum": 9007199254740991,
      "plan_id": "string",
      "upgrade_url": "string"
    }
  }
}

{
  "error": {
    "code": "invalid_request",
    "message": "string",
    "request_id": "string",
    "details": [
      {
        "field": "string",
        "message": "string"
      }
    ],
    "quota": {
      "limit": "running_machines",
      "current": 9007199254740991,
      "maximum": 9007199254740991,
      "plan_id": "string",
      "upgrade_url": "string"
    }
  }
}

{
  "error": {
    "code": "invalid_request",
    "message": "string",
    "request_id": "string",
    "details": [
      {
        "field": "string",
        "message": "string"
      }
    ],
    "quota": {
      "limit": "running_machines",
      "current": 9007199254740991,
      "maximum": 9007199254740991,
      "plan_id": "string",
      "upgrade_url": "string"
    }
  }
}

{
  "error": {
    "code": "invalid_request",
    "message": "string",
    "request_id": "string",
    "details": [
      {
        "field": "string",
        "message": "string"
      }
    ],
    "quota": {
      "limit": "running_machines",
      "current": 9007199254740991,
      "maximum": 9007199254740991,
      "plan_id": "string",
      "upgrade_url": "string"
    }
  }
}

{
  "error": {
    "code": "invalid_request",
    "message": "string",
    "request_id": "string",
    "details": [
      {
        "field": "string",
        "message": "string"
      }
    ],
    "quota": {
      "limit": "running_machines",
      "current": 9007199254740991,
      "maximum": 9007199254740991,
      "plan_id": "string",
      "upgrade_url": "string"
    }
  }
}

{
  "error": {
    "code": "invalid_request",
    "message": "string",
    "request_id": "string",
    "details": [
      {
        "field": "string",
        "message": "string"
      }
    ],
    "quota": {
      "limit": "running_machines",
      "current": 9007199254740991,
      "maximum": 9007199254740991,
      "plan_id": "string",
      "upgrade_url": "string"
    }
  }
}