cloudflare.pages.set-secret

Set or rotate encrypted secrets on a Cloudflare Pages project for a given environment.

Overview

Property	Value
Workflow type	Atomic
Library	App-cloudflare
Version	1.0

Input Schema

Field	Type	Required	Default	Description
organization_uuid	uuid	Yes	—	Organization UUID.
connection_uuid	uuid	Yes	—	Cloudflare CloudConnection UUID.
project_name	string	Yes	—	Pages project name.
environment	string	No	—	production or preview; default production.
secrets	list	Yes	—	List of (name, value) secrets to set; vaulted by SensitiveDataMiddleware, never persisted in cleartext state_data.

Output Schema

Field	Type	Required	Default	Description
organization_uuid	uuid	Yes	—	Organization UUID.
connection_uuid	uuid	Yes	—	Cloudflare CloudConnection UUID.
project_name	string	Yes	—	Pages project name.
environment	string	No	—	production or preview; default production.
secrets	list	Yes	—	List of (name, value) secrets to set; vaulted by SensitiveDataMiddleware, never persisted in cleartext state_data.
secret_names	list	No	—	Names of secrets set (values never echoed).
rotated_count	integer	No	—	Secrets set/rotated.
status	string	No	—	Result status.
failure_reason	string	No	—	Engine-stamped human-readable failure reason
failed_at_state	string	No	—	Engine-stamped state when the workflow failed
failed_step	string	No	—	Engine-stamped step name (DAG path)
failed_layer	integer	No	—	Engine-stamped layer index (DAG path)
error	string	No	—	Engine-stamped exception message
error_type	string	No	—	Engine-stamped exception class name
failure_type	string	No	—	Engine-stamped failure category (atomic path)
failed_action	string	No	—	Engine-stamped action method that raised (atomic path)

States

State	Initial	Terminal	Success	Auto-advance	Description
pending	Yes	No	—	execute	Pending secret update
completed	No	Yes	Yes	—	Secrets set
failed	No	Yes	No	—	Secret update failed

State Diagram

Transitions

From	Action	To	Description
pending	execute	completed	—
* (any state)	fail	failed	—

API Usage

POST /api/workflows/start
Content-Type: application/json

{
  "workflow_type": "cloudflare.pages.set-secret",
  "initial_data": {
    "organization_uuid": "value",
    "connection_uuid": "value",
    "project_name": "value",
    "secrets": "value"
  }
}