Create or update an environment variable

Stores a non-secret value or encrypted secret with an explicit exposure boundary. Requires env_vars:write.

PUT/agents/{agentId}/env-vars/{name}

Authorization

AuthorizationBearer <token>

Path parameters

agentIdstringrequired

format: "uuid"

namestringrequired

pattern: "^[A-Z][A-Z0-9_]*$"

Bodyrequired

application/json

object

valuestringrequired

minLength: 1

isSecretboolean

default: false

descriptionstring | null

maxLength: 500

allowedHostsarray

Show nested schema

Array items

string

exposeToarray

Defaults to both exposure targets when omitted. Send the narrowest explicit target set required by the integration.

minItems: 1
default: ["runtime","sandbox"]

Show nested schema

Array items

string

enum: ["runtime","sandbox"]

Response

application/json

Environment-variable metadata

object

idstring

format: "uuid"

objectstringrequired

const: "env_var"

namestringrequired

is_secretbooleanrequired

plain_valuestring | null

descriptionstring | null

allowed_hostsarrayrequired

Show nested schema

Array items

string

expose_toarrayrequired

Show nested schema

Array items

string

enum: ["runtime","sandbox"]

created_atinteger

updated_atinteger

curl --request PUT \
  --url 'https://YOUR_SALAMBO_BASE_URL/api/v1/agents/{agentId}/env-vars/{name}' \
  --header 'Authorization: Bearer YOUR_API_KEY' \
  --header 'Content-Type: application/json' \
  --data '@request.json'

Replace placeholders before running. JSON templates without a sample body read your payload from request.json.

Response

{
  "id": "<string>",
  "object": "env_var",
  "name": "<string>",
  "is_secret": true,
  "plain_value": "<string | null>",
  "description": "<string | null>",
  "allowed_hosts": [
    "<string>"
  ],
  "expose_to": [
    "runtime"
  ],
  "created_at": 123,
  "updated_at": 123
}