AsyncSecret | Daytona

Secret

class Secret(SecretDto)

Represents an organization-scoped Daytona Secret.

The plaintext value is write-only and is never returned by the API. When a Secret is referenced from a Sandbox, the injected environment variable holds the opaque placeholder token, not the real value. The real value is substituted transparently on outbound requests to the Secret’s allowed hosts.

Attributes:

• id str - Unique identifier for the Secret.
• name str - Name of the Secret (unique within the organization).
• description str | None - Optional description of the Secret.
• placeholder str - Opaque token injected as the env var value in Sandboxes.
• hosts list[str] - Hosts the Secret value may be sent to (may be empty).
• created_at datetime - Date and time when the Secret was created.
• updated_at datetime - Date and time when the Secret was last updated.

AsyncSecretService

class AsyncSecretService()

Service for managing organization-scoped Daytona Secrets.

Can be used to create, list, get, update and delete Secrets. Secrets can be mounted into Sandboxes as environment variables by referencing them via the secrets field on the create-sandbox parameters. The Sandbox only ever sees the Secret’s opaque placeholder; the real value is substituted at the network egress layer for the Secret’s allowed hosts.

AsyncSecretService.list

@with_instrumentation()

async def list(cursor: str | None = None,
               limit: int | None = None,
               name: str | None = None,
               sort: str | None = None,
               order: str | None = None) -> ListSecretsResponse

List Secrets in the organization using cursor-based pagination.

Arguments:

• cursor str | None - Pagination cursor from a previous response. Omit to start from the first page.
• limit int | None - Number of results per page (1-200). Defaults to 100.
• name str | None - Filter by partial name match.
• sort str | None - Field to sort by (name, createdAt or updatedAt). Defaults to createdAt.
• order str | None - Direction to sort by (asc or desc). Defaults to desc.

Returns:

• ListSecretsResponse - The current page of Secrets, the total number of Secrets matching the filters and the cursor for the next page (None when there are no more pages).

Example:

async with AsyncDaytona() as daytona:
    cursor = None
    while True:
        page = await daytona.secret.list(cursor=cursor, limit=50)
        print(f"Fetched {len(page.items)} of {page.total} secrets")
        for secret in page.items:
            print(f"{secret.name} ({secret.id})")
        if page.next_cursor is None:
            break
        cursor = page.next_cursor

AsyncSecretService.get

@with_instrumentation()

async def get(secret_id: str) -> Secret

Get a Secret by its ID.

Arguments:

• secret_id str - ID of the Secret to retrieve.

Returns:

• Secret - The requested Secret.

Raises:

• NotFoundException - If the Secret does not exist.

Example:

async with AsyncDaytona() as daytona:
    secret = await daytona.secret.get("secret-id")
    print(f"{secret.name} can be used on {', '.join(secret.hosts)}")

AsyncSecretService.create

@with_instrumentation()

async def create(params: CreateSecretParams) -> Secret

Create a new Secret.

Arguments:

• params CreateSecretParams - Parameters for the new Secret.

Returns:

• Secret - The newly created Secret (without the plaintext value).

Raises:

• ApiException - If a Secret with the same name already exists in the organization (409).

Example:

async with AsyncDaytona() as daytona:
    secret = await daytona.secret.create(
        CreateSecretParams(
            name="anthropic-prod",
            value="sk-ant-...",
            hosts=["api.anthropic.com"],
        )
    )
    print(f"Created secret {secret.name} with placeholder {secret.placeholder}")

AsyncSecretService.update

@with_instrumentation()

async def update(secret_id: str, params: UpdateSecretParams) -> Secret

Update an existing Secret. Omitted fields are left unchanged.

Arguments:

• secret_id str - ID of the Secret to update.
• params UpdateSecretParams - Fields to update.

Returns:

• Secret - The updated Secret.

Raises:

• NotFoundException - If the Secret does not exist.

Example:

async with AsyncDaytona() as daytona:
    secret = await daytona.secret.update(
        "secret-id",
        UpdateSecretParams(
            value="sk-ant-new-value",
            hosts=["api.anthropic.com", "*.anthropic.com"],
        ),
    )

AsyncSecretService.delete

@with_instrumentation()

async def delete(secret_id: str) -> None

Delete a Secret.

Arguments:

• secret_id str - ID of the Secret to delete.

Raises:

• NotFoundException - If the Secret does not exist.

Example:

async with AsyncDaytona() as daytona:
    await daytona.secret.delete("secret-id")
    print("Secret deleted")

ListSecretsResponse

class ListSecretsResponse(ListSecretsResponseDto)

Represents a paginated list of Daytona Secrets.

Attributes:

• items list[Secret] - List of Secret instances in the current page.
• total int - Total number of Secrets matching the filters.
• next_cursor str | None - Cursor for the next page of results, or None when there are no more pages.

CreateSecretParams

class CreateSecretParams(BaseModel)

Parameters for creating a new Secret.

Attributes:

• name str - Name of the Secret. Must match ^[a-zA-Z_][a-zA-Z0-9_-]*$ and be unique within the organization.
• value str - The plaintext Secret value. Stored encrypted and never returned by the API.
• description str | None - Optional description of the Secret.
• hosts list[str] | None - Hosts the Secret value may be sent to. Each entry is a hostname (api.example.com) or a *. wildcard (*.example.com); ports are not supported. Omit to leave the Secret unrestricted.

UpdateSecretParams

class UpdateSecretParams(BaseModel)

Parameters for updating an existing Secret. Omitted fields are left unchanged.

Attributes:

• value str | None - Replaces the stored Secret value when present.
• description str | None - Optional description of the Secret.
• hosts list[str] | None - Hosts the Secret value may be sent to. Same constraints as CreateSecretParams.hosts.