Skip to main content
Secrets are environment variables for your app. Naive stores them encrypted and syncs them to the app’s Vercel project environment: production maps to Vercel’s production environment; preview maps to Vercel’s preview + development environments. Redeploy after changes for them to take effect. These are provisioned automatically and shouldn’t be set manually:
  • NEXT_PUBLIC_APP_URL — all apps
  • NEXT_PUBLIC_SUPABASE_URL, NEXT_PUBLIC_SUPABASE_ANON_KEY — fullstack apps

​
List Secrets

curl https://api.usenaive.ai/v1/apps/ca7a1b8c-a4d4-4824-b92d-89d5b297eb62/secrets \
  -H "Authorization: Bearer nv_sk_live_..."

{
  "secrets": [
    {
      "id": "secret-uuid-1",
      "key": "PAYMENTS_SECRET_KEY",
      "target": "production",
      "createdAt": "2026-01-15T10:00:00Z"
    },
    {
      "id": "secret-uuid-2",
      "key": "NEXT_PUBLIC_SUPABASE_URL",
      "target": "preview",
      "createdAt": "2026-01-15T10:00:00Z"
    }
  ]
}
Values are never returned in list responses — use the reveal endpoint for individual values.

​
Set Secret

Creates the variable, or updates it in place if the key already exists for that target (upserted on Vercel as well): 
curl -X POST https://api.usenaive.ai/v1/apps/:id/secrets \
  -H "Authorization: Bearer nv_sk_live_..." \
  -H "Content-Type: application/json" \
  -d '{"key": "PAYMENTS_KEY", "value": "sk_live_...", "target": "production"}'

​
Request Body

FieldTypeRequiredDescription
keystringYesVariable name
valuestringYesVariable value
targetstringYespreview or production

​
Response

200
{
  "key": "PAYMENTS_KEY",
  "target": "production"
}

​
Reveal Secret

curl "https://api.usenaive.ai/v1/apps/:id/secrets/PAYMENTS_KEY/reveal?target=production" \
  -H "Authorization: Bearer nv_sk_live_..."
Returns the decrypted value:
200
{
  "value": "sk_live_abc123..."
}
404
{
  "error": {
    "code": "resource_not_found",
    "message": "Secret not found"
  }
}

​
Delete Secret

Removes the variable from Naive and from the Vercel project environment: 
curl -X DELETE "https://api.usenaive.ai/v1/apps/:id/secrets/PAYMENTS_KEY?target=production" \
  -H "Authorization: Bearer nv_sk_live_..."
200
{
  "ok": true
}

​
Errors

400
{
  "error": {
    "code": "invalid_input",
    "message": "target must be 'preview' or 'production'"
  }
}