Upsert secret
Store an integration secret in Google Secret Manager and record a gsm: ref on the agent. Re-PUTting the same key adds a new GSM version (rotate). Hermes loads the key at startup as an environment variable. Running agents restart so the new mapping is applied; paused/stopped agents pick it up on next start. Returns operation_id; pending_reconcile means desired state is durable and safe to retry via reconcile.
Authorizations
Clerk session JWT for the web app (active organization required), or an organization-scoped SEAOTTER access key (so_…) from POST /api/v1/api-keys for programmatic / docs try-it / MCP use. The same so_… value is both Authorization: Bearer so_… and SEAOTTER_API_KEY.
Path Parameters
Body
Portable env name matching ^[A-Z_][A-Z0-9_]{0,127}$
128^[A-Z_][A-Z0-9_]{0,127}$"OPENAI_API_KEY"
Secret value (stored in Secret Manager). Re-PUTting the same key adds a new GSM version and rotates the live value. Non-empty, no NULs, max 65536 UTF-8 bytes.
1 - 65536
