# iai secrets update

Update keys in a secret

## Synopsis

Update one or more keys in an existing secret.

By default, only the specified keys are updated (merge/upsert). Existing keys not included in the update are preserved.

With --replace, ALL secret data is replaced. Any keys not included in the new data will be permanently deleted.

With --remove, the specified keys are deleted from the secret. Cannot be combined with --data, --from-env-file, or --replace.

Secret data can be provided via: --data KEY=VALUE (can be repeated) --from-env-file FILE (KEY=VALUE pairs, one per line)

When both are provided, --data values take precedence.

Examples:

**Update a single key (other keys preserved)**

iai secrets update my-secret -d API\_KEY=new-value

**Update multiple keys (other keys preserved)**

iai secrets update my-secret -d API\_KEY=val1 -d DB\_PASS=val2

**Replace all keys (keys not provided will be deleted)**

iai secrets update my-secret -d API\_KEY=val1 --replace

**Remove specific keys from a secret**

iai secrets update my-secret --remove API\_KEY

**Remove multiple keys**

iai secrets update my-secret --remove KEY1 --remove KEY2

```
iai secrets update <secret_name> [flags]
```

## Options

```
  -d, --data stringArray       Secret data in KEY=VALUE form (repeatable)
      --from-env-file string   Path to env file with KEY=VALUE pairs (one per line)
  -h, --help                   help for update
  -o, --organization string    Organization name that owns the project
  -p, --project string         Project name that owns the secrets
      --remove stringArray     Key name to remove from the secret (repeatable)
      --replace                Replace all secret data (keys not provided will be deleted)
```

## Options inherited from parent commands

```
      --api-key string               API key for authentication
      --cfg-file string              Path to YAML config file with organization, project, and optional service definitions
      --deployment-hostname string   Hostname for the deployment API (default "https://deployment.interactive.ai")
      --hostname string              Hostname for the API (default "https://app.interactive.ai")
```

## SEE ALSO

* [iai secrets](/cli/iai_secrets.md) - Encrypted key-value pairs for services and agents


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.interactive.ai/cli/iai_secrets_update.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.