Skip to main content
  • A secret value can be up to 64 KiB, measured in UTF-8 bytes. Exceeding the limit fails with a 400 error. Values used in headers must also be valid HTTP header values.
  • A project can hold up to 100 secrets. Exceeding the limit fails with a 409 error.
  • The network rules for one host can reference up to 32 distinct secret names after lowercasing. Repeated references to the same name count once. Exceeding the limit fails network-rule validation with a 400 error.
  • A request can resolve up to 256 KiB of secret values in total, counting each distinct name once. References that exceed this budget cannot be resolved, so their headers are omitted.
  • Secret metadata supports up to 32 entries, with keys up to 128 bytes, values up to 1,024 bytes, and 8 KiB in total across all keys and values. Exceeding these limits returns 400.
  • Secret.list returns up to 100 entries per page by default. Use Secret.list({ limit: 50 }) in JavaScript or Secret.list(limit=50) in Python for smaller pages. Metadata filtering is not supported.