Skip to navigation
API ReferenceSecret Bindings

Replace an endpoint's secret bindings

Full-replace: the provided list becomes the endpoint’s complete set of secret slots. Each secretReferenceId (when present) must belong to the endpoint’s namespace.

Authentication

AuthorizationBearer

WorkOS API key (Authorization: Bearer sk_…). Scope comes from the key’s permissions: a key carrying passport:admin has admin scope (full catalog CRUD), any other key has member scope (reads + access requests). Organization-owned keys are admin by ownership and carry no associated user; keys minted for a user carry theirs, which is what access requests and createdBy are attributed to.

Path parameters

endpointIdstringRequiredformat: "uuid"

Request

This endpoint expects an object or a list of objects.
WrappedobjectRequired
OR
Bare arraylist of objectsRequired

Response headers

RateLimit-Limitinteger
Requests allowed in the current window.
RateLimit-Remaininginteger
Requests remaining in the current window.
RateLimit-Resetinteger
Unix epoch seconds when the window resets.

Response

OK
datalist of objects

Errors

400
Bad Request Error
401
Unauthorized Error
403
Forbidden Error
404
Not Found Error
429
Too Many Requests Error
500
Internal Server Error
503
Service Unavailable Error