curl -X PUT 'https://api.github.com/orgs/example-org/actions/secrets/example-secret-name' \
  -H "Authorization: Bearer $GITHUB_TOKEN" \
  -H 'Accept: application/vnd.github+json' \
  -H 'X-GitHub-Api-Version: 2026-03-10' \
  -H 'Content-Type: application/json' \
  -d '{
  "encrypted_value": "example-encrypted-value",
  "key_id": "key-id",
  "visibility": "all"
}'

# PUT /orgs/{org}/actions/secrets/{secret_name} (GitHub API)
Base URL: https://api.github.com
Auth: Authorization; GitHub token; required.
Request formats: application/json.
Last verified: 2026-10-20

> Create or update an organization secret

## Critical Gotchas
* GitHub recommends an `Accept: application/vnd.github+json` header and an explicit `X-GitHub-Api-Version` header.
* Fine-grained tokens only authorize repositories and permissions selected when the token is created.

## cURL
curl -X PUT 'https://api.github.com/orgs/example-org/actions/secrets/example-secret-name' \
  -H "Authorization: Bearer $GITHUB_TOKEN" \
  -H 'Accept: application/vnd.github+json' \
  -H 'X-GitHub-Api-Version: 2026-03-10' \
  -H 'Content-Type: application/json' \
  -d '{
  "encrypted_value": "example-encrypted-value",
  "key_id": "key-id",
  "visibility": "all"
}'

## Parameters
| Name | In | Type | Required | Description |
| :--- | :--- | :--- | :--- | :--- |
| org | path | string | Yes | The organization name. The name is not case sensitive. |
| secret_name | path | string | Yes | The name of the secret. |
| encrypted_value | body | string | Yes | Value for your secret, encrypted with [LibSodium](https://libsodium.gitbook.i... |
| key_id | body | string | Yes | ID of the key you used to encrypt the secret. |
| visibility | body | string | Yes | Which type of organization repositories have access to the organization secre... |
| selected_repository_ids | body | integer[] | No | An array of repository ids that can access the organization secret. You can o... |

## Response example
{}

---
Need an API key? Get one at https://github.com/settings/tokens

PUT

PUT /orgs/{org}/actions/secrets/{secret_name} — GitHub API

GitHub token (required); https://api.github.com

GitHub API

Create or update an organization secret

Base URL: https://api.github.com
Auth: Authorization: Bearer <GITHUB_API_KEY>
Last verified: 2026-10-20 · upstream hash matched

Actions Try in browser→

Agents: curl -H "Accept: text/markdown" this URL
→ 314 tokens · Vary: Accept

Critical gotchas

GitHub recommends an Accept: application/vnd.github+json header and an explicit X-GitHub-Api-Version header.

Fine-grained tokens only authorize repositories and permissions selected when the token is created.

cURL

curl -X PUT 'https://api.github.com/orgs/example-org/actions/secrets/example-secret-name' \  -H "Authorization: Bearer $GITHUB_TOKEN" \  -H 'Accept: application/vnd.github+json' \  -H 'X-GitHub-Api-Version: 2026-03-10' \  -H 'Content-Type: application/json' \  -d '{  "encrypted_value": "example-encrypted-value",  "key_id": "key-id",  "visibility": "all"}'

Parameters

Name	In	Type	Required	Description
org	path	string	Yes	The organization name. The name is not case sensitive.
secret_name	path	string	Yes	The name of the secret.
encrypted_value	body	string	Yes	Value for your secret, encrypted with [LibSodium](https://libsodium.gitbook.io/doc/bindings_for_other_languages) using the public key retrieved from the [Get an organization public key](https://docs.github.com/rest/actions/secrets#get-an-organization-public-key) endpoint.
key_id	body	string	Yes	ID of the key you used to encrypt the secret.
visibility	body	string	Yes	Which type of organization repositories have access to the organization secret. `selected` means only the repositories specified by `selected_repository_ids` can access the secret.
selected_repository_ids	body	integer[]	No	An array of repository ids that can access the organization secret. You can only provide a list of repository ids when the `visibility` is set to `selected`. You can manage the list of selected repositories using the [List selected repositories for an organization secret](https://docs.github.com/rest/actions/secrets#list-selected-repositories-for-an-organization-secret), [Set selected repositories for an organization secret](https://docs.github.com/rest/actions/secrets#set-selected-repositories-for-an-organization-secret), and [Remove selected repository from an organization secret](https://docs.github.com/rest/actions/secrets#remove-selected-repository-from-an-organization-secret) endpoints.

Response 200 OK

{}

Get a free GitHub API key → sponsored

Affiliate link - we may earn a commission, at no extra cost to you.