Organization secrets

jelou secret manages organization secrets: encrypted environment variables that are injected into workflows and functions at runtime. By default, list, set, and delete operate on the whole organization; with --project (alias --brain) you can scope any of the three to a single project instead.

Subcommand	Description
`list`	Lists the secret names of the active organization
`set <NAME> [value]`	Creates or updates a secret (upsert)
`delete <NAME>`	Deletes a secret

jelou secret list --json
jelou secret set OPENAI_API_KEY                       # interactive: prompts for the value
jelou secret set OPENAI_API_KEY sk-proj-abc123        # inline
echo "$GITHUB_TOKEN" | jelou secret set GITHUB_TOKEN --from-stdin
jelou secret delete OPENAI_API_KEY --yes
jelou secret list --project 01H2XCEJQTG2H5V5NKCYW3J7Z2  # only that project's secrets

Flag	Description
`--from-stdin`	Reads the value from stdin (ideal for CI)
`--yes`, `-y`	Skips confirmation when deleting
`--project`, `--brain <id>`	Scopes `list`/`set`/`delete` to a single project instead of the whole organization

Names must be UPPER_SNAKE_CASE (e.g. MY_API_KEY) and are case-sensitive.

secret list returns names and metadata but never the value. set is an upsert without a diff: when overwriting, the previous value is lost with no recovery. When you delete a secret, the workflows and functions that read it get undefined on the next execution — this usually causes silent degradation, not errors. Review the known consumers before deleting.

If you need per-function secrets (not organization-wide), use jelou functions secrets set <slug> — see the Functions CLI.

⌘I

Getting Started

Developer

Jelou CLI

Outbound Messaging

Management

Marketplace

Channels

Configuration

Billing