baseten org secret

Manage secrets

list

baseten org secret list [OPTIONS]

List secrets (metadata only; values are never returned).

Options

-q, --jq · TEXT

Filter JSON output with a jq expression; implies —output json (or jsonl for streamed commands)

-o, --output · TEXT · default: "text"

Output format

One of: text, json, jsonl, none

--profile · TEXT

Use a specific stored profile for this command, overriding BASETEN_PROFILE and the current profile

--team · TEXT

Filter to a specific team by name or ID. Defaults to all teams the caller belongs to.

-v, --verbose · BOOL

Enable verbose logging

Examples

List secrets across all accessible teams

baseten org secret list

List secrets in a specific team

baseten org secret list --team <team>

Filter output with --jq

Print just the secret names

baseten org secret list --jq '.secrets[].name'

Output

Text mode (--output text): Table with columns: NAME, TEAM, CREATED. When no secrets exist, prints “No secrets found.” to stderr.

JSON mode (--output json): payload type managementapi.Secrets.

set

baseten org secret set [OPTIONS]

Create or update a secret. The value is read from stdin (or prompted interactively on a TTY). --value is supported but discouraged: it leaks the secret into shell history and ps output. Pass --team to target a specific team; without it the organization’s default team is used.

Options

-q, --jq · TEXT

Filter JSON output with a jq expression; implies —output json (or jsonl for streamed commands)

--name · TEXT · required

Name of the secret.

-o, --output · TEXT · default: "text"

Output format

One of: text, json, jsonl, none

--profile · TEXT

Use a specific stored profile for this command, overriding BASETEN_PROFILE and the current profile

--team · TEXT

Team name or ID the secret belongs to. Defaults to the organization’s default team.

--value · TEXT

Secret value. Discouraged: leaks into shell history and process list. Prefer stdin or prompt.

-v, --verbose · BOOL

Enable verbose logging

Examples

Set a secret by piping its value through stdin

echo $TOKEN | baseten org secret set --name <name>

Set a secret scoped to a specific team

echo $TOKEN | baseten org secret set --name <name> --team <team>

Filter output with --jq

Print the secret’s team

echo $TOKEN | baseten org secret set --name <name> --jq '.team_name'

Output

Text mode (--output text): Prints “Set secret name” to stderr on success; no stdout output.

JSON mode (--output json): payload type managementapi.Secret.

delete

baseten org secret delete [OPTIONS]

Delete a secret by name.

Options

-q, --jq · TEXT

Filter JSON output with a jq expression; implies —output json (or jsonl for streamed commands)

--name · TEXT · required

Name of the secret to delete.

-o, --output · TEXT · default: "text"

Output format

One of: text, json, jsonl, none

--profile · TEXT

Use a specific stored profile for this command, overriding BASETEN_PROFILE and the current profile

--team · TEXT

Team name or ID the secret belongs to. Defaults to the organization’s default team.

-v, --verbose · BOOL

Enable verbose logging

Examples

Delete a secret by name

baseten org secret delete --name <name>

Filter output with --jq

Print just the deleted secret name

baseten org secret delete --name <name> --jq '.name'

Output

Text mode (--output text): Prints “Deleted secret name” to stderr on success; no stdout output.

JSON mode (--output json): payload type managementapi.SecretTombstone.