Secrets - Naïve

Secrets are environment variables for your app. Naive stores them encrypted and syncs them to the app’s hosting environment: production maps to the production environment; preview maps to the preview + development environments. Redeploy after changes for them to take effect. These are provisioned automatically and shouldn’t be set manually:

NEXT_PUBLIC_APP_URL — all apps
NEXT_PUBLIC_SUPABASE_URL, NEXT_PUBLIC_SUPABASE_ANON_KEY — fullstack apps

List Secrets

curl https://api.usenaive.ai/v1/apps/ca7a1b8c-a4d4-4824-b92d-89d5b297eb62/secrets \
  -H "Authorization: Bearer nv_sk_live_..."

{
  "secrets": [
    {
      "id": "secret-uuid-1",
      "key": "PAYMENTS_SECRET_KEY",
      "target": "production",
      "createdAt": "2026-01-15T10:00:00Z"
    },
    {
      "id": "secret-uuid-2",
      "key": "NEXT_PUBLIC_SUPABASE_URL",
      "target": "preview",
      "createdAt": "2026-01-15T10:00:00Z"
    }
  ]
}

Values are never returned in list responses — use the reveal endpoint for individual values.

Set Secret

Creates the variable, or updates it in place if the key already exists for that target (upserted on the hosting environment as well):

curl -X POST https://api.usenaive.ai/v1/apps/:id/secrets \
  -H "Authorization: Bearer nv_sk_live_..." \
  -H "Content-Type: application/json" \
  -d '{"key": "PAYMENTS_KEY", "value": "sk_live_...", "target": "production"}'

Request Body

Field	Type	Required	Description
`key`	string	Yes	Variable name
`value`	string	Yes	Variable value
`target`	string	Yes	`preview` or `production`

Response

200

{
  "key": "PAYMENTS_KEY",
  "target": "production"
}

Reveal Secret

curl "https://api.usenaive.ai/v1/apps/:id/secrets/PAYMENTS_KEY/reveal?target=production" \
  -H "Authorization: Bearer nv_sk_live_..."

Returns the decrypted value:

200

{
  "value": "sk_live_abc123..."
}

404

{
  "error": {
    "code": "resource_not_found",
    "message": "Secret not found"
  }
}

Delete Secret

Removes the variable from Naive and from the hosting environment:

curl -X DELETE "https://api.usenaive.ai/v1/apps/:id/secrets/PAYMENTS_KEY?target=production" \
  -H "Authorization: Bearer nv_sk_live_..."

200

{
  "ok": true
}

Errors

400

{
  "error": {
    "code": "invalid_input",
    "message": "target must be 'preview' or 'production'"
  }
}

{ "secrets": [ { "id": "secret-uuid-1", "key": "PAYMENTS_SECRET_KEY", "target": "production", "createdAt": "2026-01-15T10:00:00Z" }, { "id": "secret-uuid-2", "key": "NEXT_PUBLIC_SUPABASE_URL", "target": "preview", "createdAt": "2026-01-15T10:00:00Z" } ] }

​List Secrets

​Set Secret

​Request Body

​Response

​Reveal Secret

​Delete Secret

​Errors