Documentation menu

Set secret binding

PUThttps://api.instacloud.com/projects/{projectId}/secret-bindings/{name}

Token scope: account · org · project — read-only tokens refused (not a GET).

Bind a provider-minted credential into a compute env var. Gated — secrets.write.

Parameters

NameInTypeRequiredDescription
projectIdpathstringyes
namepathstringyes^[A-Z][A-Z0-9_]{0,63}$

Request body

application/json

FieldTypeRequiredDescription
branchstringnoBranch name (defaults to the project's default branch)
targetstringyestarget compute service ref: "compute/<name>"
sourcestringyessource service ref, e.g. "postgres/db"
sourceNamestringnosource credential name; optional only when the source exposes exactly one credential

Responses

200

Default Response

FieldTypeRequiredDescription
okbooleanno

202

Default Response

FieldTypeRequiredDescription
status"approval_required"no
approvalIdstringno
actionstringnothe gated action, or a comma-joined compound set — prefer `actions`
actionsstring[]noevery capability this approval covers
messagestringno
urlstringnothe console page where a project admin reviews this request
nextActionsobject[]no
nextActions.opstringyesNeutral logical action id, e.g. "service.add" — NOT an operationId or a CLI/MCP tool name; each client maps it to its own surface.
nextActions.reasonstringyesNatural-language, human/LLM-facing "why do this now".
nextActions.argsobjectnoSuggested, flat named arguments; "<placeholder>"s where a value is unknown.
nextActions.gatedbooleannoTrue if the action passes a governance gate.

400

Default Response

FieldTypeRequiredDescription
errorstringyes

403

Default Response

FieldTypeRequiredDescription
errorstringyes

404

Default Response

FieldTypeRequiredDescription
errorstringyes

409

Default Response

FieldTypeRequiredDescription
errorstringyes

View as Markdown