remove_secret
Delete a single secret key for a service, or omit the key to remove all secrets in that scope; use caution with shared keys that other apps reference.
Instructions
Delete one secret key, or all of a service's secrets when key is omitted.
Deleting a shared key can break every app still referencing it via
``${secrets.shared.KEY}``.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| key | No | The one secret key to delete; omit it — null or an empty string — to delete ALL of the scope's secrets at once. Deleting a key that does not exist is a 404. | |
| service | Yes | Service (app, model or database) whose secrets this call modifies — need not exist yet: a set on an undeployed name reserves it for this token until deployed — or ``shared`` for the global scope (set: unscoped submitter or admin; delete: admin), read by a service only where a ``${secrets.shared.KEY}`` reference is honoured (``ai``/``db``/``edge_auth`` refs, a git ``token_ref``), never via ``env``. | |
| idempotency_key | No | Caller-chosen key: a retry with the same key replays the first result instead of acting twice. Omit and a fresh key is minted per call, so each call acts. |