Secrets

Secrets API

Four routes, one Bearer key.

List

GET/v1/secretsclient secret

→ 200 { "secrets": [ { "name": "DATABASE_URL" }, { "name": "KHALTI_SECRET_KEY" } ] }

GET/v1/secrets/{name}client secret

→ 200 { "name": "DATABASE_URL", "value": "postgres://…" }
→ 404 { "detail": "secret_not_found" }

POST/v1/secretsclient secret

{ "name": "WEBHOOK_SECRET", "value": "whsec_…" }
→ 204

DELETE/v1/secrets/{name}client secret

→ 204
→ 404 { "detail": "secret_not_found" }

Read secrets once at start-up and keep them in process memory. The store is not designed as a per-request configuration service.