Functions

List function secrets

Retrieve all secret names configured for this function. Secret values are NEVER included in list responses for security.

Secrets are injected as environment variables when your function executes. Use this endpoint to:

Audit which secrets are configured
Verify secret names before creating new ones
Check secret types (text, json, inherited)

Important: If the function is not deployed, this endpoint returns an empty array. Secrets can only be managed for deployed functions.

Secret values are only returned once when creating a secret via POST /functions//secrets. After creation, values cannot be retrieved - only the secret name and type are visible.

GET

functions

{function_id}

secrets

List function secrets

curl --request GET \
  --url https://api.kapso.ai/platform/v1/functions/{function_id}/secrets \
  --header 'X-API-Key: <api-key>'

{
  "data": [
    {
      "name": "STRIPE_API_KEY",
      "type": "text"
    },
    {
      "name": "DATABASE_CONFIG",
      "type": "json"
    },
    {
      "name": "API_ENDPOINT",
      "type": "inherited"
    }
  ]
}

Authorizations

X-API-Key

string

header

required

Path Parameters

function_id

string<uuid>

required

Function identifier

Response

Secrets retrieved successfully (values not included)

List of function secrets. Note: Secret values are never included in list responses for security. Values are only returned when creating a secret.

data

object[]

required

Show child attributes

Create function secretCreate a secret for this function. Secrets are injected as environment variables when your function executes. Use secrets to store sensitive data without hardcoding in function code: - API keys (Stripe, OpenAI, Twilio, etc.) - External service connection strings - OAuth credentials - Service account tokens Requirements: - Function must be in 'deployed' status (422 if not) - Secret name must be uppercase alphanumeric with underscores (e.g., STRIPE_API_KEY) - Secret name must be unique within the function Secret types are automatically detected: - String values → text type - Object/array values → json type Important: The secret value is only returned in the creation response. It cannot be retrieved later. Store the value securely after creation if needed. After creating a secret, it's immediately available in your function as an environment variable with the specified name.

List function secrets

curl --request GET \
  --url https://api.kapso.ai/platform/v1/functions/{function_id}/secrets \
  --header 'X-API-Key: <api-key>'

{
  "data": [
    {
      "name": "STRIPE_API_KEY",
      "type": "text"
    },
    {
      "name": "DATABASE_CONFIG",
      "type": "json"
    },
    {
      "name": "API_ENDPOINT",
      "type": "inherited"
    }
  ]
}