> ## Documentation Index
> Fetch the complete documentation index at: https://docs.jelou.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Organization secrets

> Manage organization-level secrets (encrypted environment variables) that are injected into workflows and functions at runtime.

`jelou secret` manages organization secrets: encrypted environment
variables that are injected into **workflows and functions** at runtime.
By default, `list`, `set`, and `delete` operate on the whole organization;
with `--project` (alias `--brain`) you can scope any of the three to a
single project instead.

| Subcommand           | Description                                       |
| -------------------- | ------------------------------------------------- |
| `list`               | Lists the secret names of the active organization |
| `set <NAME> [value]` | Creates or updates a secret (upsert)              |
| `delete <NAME>`      | Deletes a secret                                  |

```bash theme={null}
jelou secret list --json
jelou secret set OPENAI_API_KEY                       # interactive: prompts for the value
jelou secret set OPENAI_API_KEY sk-proj-abc123        # inline
echo "$GITHUB_TOKEN" | jelou secret set GITHUB_TOKEN --from-stdin
jelou secret delete OPENAI_API_KEY --yes
jelou secret list --project 01H2XCEJQTG2H5V5NKCYW3J7Z2  # only that project's secrets
```

| Flag                        | Description                                                                        |
| --------------------------- | ---------------------------------------------------------------------------------- |
| `--from-stdin`              | Reads the value from stdin (ideal for CI)                                          |
| `--yes`, `-y`               | Skips confirmation when deleting                                                   |
| `--project`, `--brain <id>` | Scopes `list`/`set`/`delete` to a single project instead of the whole organization |

Names must be `UPPER_SNAKE_CASE` (e.g. `MY_API_KEY`) and are
case-sensitive.

<Warning>
  `secret list` returns names and metadata but **never the value**. `set` is an
  upsert without a diff: when overwriting, the previous value is lost with no recovery.
  When you delete a secret, the workflows and functions that read it get `undefined`
  on the next execution — this usually causes silent degradation, not errors.
  Review the known consumers before deleting.
</Warning>

<Note>
  If you need per-function secrets (not organization-wide), use
  `jelou functions secrets set <slug>` — see the
  [Functions CLI](/en/guides/functions/cli).
</Note>