--- description: Wrangler commands for managing account secrets within a Secrets Store. title: Secrets Store image: https://developers.cloudflare.com/og-docs.png --- [Skip to content](#main-content) > Documentation Index > Fetch the complete documentation index at: https://developers.cloudflare.com/workers/llms.txt > Use this file to discover all available pages before exploring further. # Secrets Store Last updated Aug 24, 2026|Copy as Markdown|[View as Markdown](https://docs-durable-objects-instance-replaced-errors.previews.developers.cloudflare.com/workers/wrangler/commands/secrets-store/index.md)|[Agent setup](https://docs-durable-objects-instance-replaced-errors.previews.developers.cloudflare.com/agent-setup/) Interact with [Secret Store](https://docs-durable-objects-instance-replaced-errors.previews.developers.cloudflare.com/secrets-store/) using Wrangler. ## `secrets-store secret` Use the following commands to manage your account secrets. \`--remote\` option In order to interact with Secrets Store in production, you should append `--remote` to your command. Without it, your command will default to [local development mode](https://docs-durable-objects-instance-replaced-errors.previews.developers.cloudflare.com/workers/local-development/). ### `secrets-store secret create` Create a secret within a store npmyarnpnpm ``` npx wrangler secrets-store secret create [STORE-ID] ``` ``` yarn wrangler secrets-store secret create [STORE-ID] ``` ``` pnpm wrangler secrets-store secret create [STORE-ID] ``` * `[STORE-ID]` `string` required ID of the store in which the secret resides * `--name` `string` required Name of the secret * `--value` `string` Value of the secret (Note: Only for testing. Not secure as this will leave secret value in plain-text in terminal history, exclude this flag and use automatic prompt instead) * `--scopes` `string` required Scopes for the secret (comma-separated list of scopes eg:"workers") * `--comment` `string` Comment for the secret * `--remote` `boolean` default: false Execute command against remote Secrets Store * `--persist-to` `string` Directory for local persistence Global flags * `--v` `boolean` alias: --version Show version number * `--cwd` `string` Run as if Wrangler was started in the specified directory instead of the current working directory * `--config` `string` alias: --c Path to Wrangler configuration file * `--env` `string` alias: --e Environment to use for operations, and for selecting .env and .dev.vars files * `--env-file` `string` Path to an .env file to load - can be specified multiple times - values from earlier files are overridden by values in later files * `--experimental-provision` `boolean` aliases: --x-provisiondefault: true Experimental: Enable automatic resource provisioning * `--experimental-auto-create` `boolean` alias: --x-auto-createdefault: true Automatically provision draft bindings with new resources * `--install-skills` `boolean` default: false Install Cloudflare skills for detected AI coding agents before running the command * `--profile` `string` Use a specific auth profile The following is an example of using the `create` command to create an account-level secret. ```sh npx wrangler secrets-store secret create 8f7a1cdced6342c18d223ece462fd88d --name ServiceA_key-1 --scopes workers --remote ``` ```sh โœ“ Enter a secret value: โ€บ *** ๐Ÿ” Creating secret... (Name: ServiceA_key-1, Value: REDACTED, Scopes: workers, Comment: undefined) โœ“ Select an account: โ€บ My account โœ… Created secret! (ID: 13bc7498c6374a4e9d13be091c3c65f1) ``` ### `secrets-store secret update` Update a secret within a store npmyarnpnpm ``` npx wrangler secrets-store secret update [STORE-ID] ``` ``` yarn wrangler secrets-store secret update [STORE-ID] ``` ``` pnpm wrangler secrets-store secret update [STORE-ID] ``` * `[STORE-ID]` `string` required ID of the store in which the secret resides * `--secret-id` `string` required ID of the secret to update * `--value` `string` Updated value of the secret (Note: Only for testing. Not secure as this will leave secret value in plain-text in terminal history, exclude this flag and use automatic prompt instead) * `--scopes` `string` Updated scopes for the secret (comma-separated list of scopes eg:"workers") * `--comment` `string` Updated comment for the secret * `--remote` `boolean` default: false Execute command against remote Secrets Store * `--persist-to` `string` Directory for local persistence Global flags * `--v` `boolean` alias: --version Show version number * `--cwd` `string` Run as if Wrangler was started in the specified directory instead of the current working directory * `--config` `string` alias: --c Path to Wrangler configuration file * `--env` `string` alias: --e Environment to use for operations, and for selecting .env and .dev.vars files * `--env-file` `string` Path to an .env file to load - can be specified multiple times - values from earlier files are overridden by values in later files * `--experimental-provision` `boolean` aliases: --x-provisiondefault: true Experimental: Enable automatic resource provisioning * `--experimental-auto-create` `boolean` alias: --x-auto-createdefault: true Automatically provision draft bindings with new resources * `--install-skills` `boolean` default: false Install Cloudflare skills for detected AI coding agents before running the command * `--profile` `string` Use a specific auth profile ### `secrets-store secret duplicate` Duplicate a secret within a store npmyarnpnpm ``` npx wrangler secrets-store secret duplicate [STORE-ID] ``` ``` yarn wrangler secrets-store secret duplicate [STORE-ID] ``` ``` pnpm wrangler secrets-store secret duplicate [STORE-ID] ``` * `[STORE-ID]` `string` required ID of the store in which the secret resides * `--secret-id` `string` required ID of the secret to duplicate the secret value of * `--name` `string` required Name of the new secret * `--scopes` `string` required Scopes for the new secret * `--comment` `string` Comment for the new secret * `--remote` `boolean` default: false Execute command against remote Secrets Store * `--persist-to` `string` Directory for local persistence Global flags * `--v` `boolean` alias: --version Show version number * `--cwd` `string` Run as if Wrangler was started in the specified directory instead of the current working directory * `--config` `string` alias: --c Path to Wrangler configuration file * `--env` `string` alias: --e Environment to use for operations, and for selecting .env and .dev.vars files * `--env-file` `string` Path to an .env file to load - can be specified multiple times - values from earlier files are overridden by values in later files * `--experimental-provision` `boolean` aliases: --x-provisiondefault: true Experimental: Enable automatic resource provisioning * `--experimental-auto-create` `boolean` alias: --x-auto-createdefault: true Automatically provision draft bindings with new resources * `--install-skills` `boolean` default: false Install Cloudflare skills for detected AI coding agents before running the command * `--profile` `string` Use a specific auth profile ### `secrets-store secret get` Get a secret within a store npmyarnpnpm ``` npx wrangler secrets-store secret get [STORE-ID] ``` ``` yarn wrangler secrets-store secret get [STORE-ID] ``` ``` pnpm wrangler secrets-store secret get [STORE-ID] ``` * `[STORE-ID]` `string` required ID of the store in which the secret resides * `--secret-id` `string` required ID of the secret to retrieve * `--remote` `boolean` default: false Execute command against remote Secrets Store * `--persist-to` `string` Directory for local persistence Global flags * `--v` `boolean` alias: --version Show version number * `--cwd` `string` Run as if Wrangler was started in the specified directory instead of the current working directory * `--config` `string` alias: --c Path to Wrangler configuration file * `--env` `string` alias: --e Environment to use for operations, and for selecting .env and .dev.vars files * `--env-file` `string` Path to an .env file to load - can be specified multiple times - values from earlier files are overridden by values in later files * `--experimental-provision` `boolean` aliases: --x-provisiondefault: true Experimental: Enable automatic resource provisioning * `--experimental-auto-create` `boolean` alias: --x-auto-createdefault: true Automatically provision draft bindings with new resources * `--install-skills` `boolean` default: false Install Cloudflare skills for detected AI coding agents before running the command * `--profile` `string` Use a specific auth profile The following is an example with the expected output: ```sh npx wrangler secrets-store secret get 8f7a1cdced6342c18d223ece462fd88d --secret-id 13bc7498c6374a4e9d13be091c3c65f1 --remote ``` ```sh ๐Ÿ” Getting secret... (ID: 13bc7498c6374a4e9d13be091c3c65f1) โœ“ Select an account: โ€บ My account | Name | ID | StoreID | Comment | Scopes | Status | Created | Modified | |-----------------------------|-------------------------------------|-------------------------------------|---------|---------|---------|------------------------|------------------------| | ServiceA_key-1 | 13bc7498c6374a4e9d13be091c3c65f1 | 8f7a1cdced6342c18d223ece462fd88d | | workers | active | 4/9/2025, 10:06:01 PM | 4/15/2025, 09:13:05 AM | ``` ### `secrets-store secret delete` Delete a secret within a store npmyarnpnpm ``` npx wrangler secrets-store secret delete [STORE-ID] ``` ``` yarn wrangler secrets-store secret delete [STORE-ID] ``` ``` pnpm wrangler secrets-store secret delete [STORE-ID] ``` * `[STORE-ID]` `string` required ID of the store in which the secret resides * `--secret-id` `string` required ID of the secret to delete * `--remote` `boolean` default: false Execute command against remote Secrets Store * `--persist-to` `string` Directory for local persistence Global flags * `--v` `boolean` alias: --version Show version number * `--cwd` `string` Run as if Wrangler was started in the specified directory instead of the current working directory * `--config` `string` alias: --c Path to Wrangler configuration file * `--env` `string` alias: --e Environment to use for operations, and for selecting .env and .dev.vars files * `--env-file` `string` Path to an .env file to load - can be specified multiple times - values from earlier files are overridden by values in later files * `--experimental-provision` `boolean` aliases: --x-provisiondefault: true Experimental: Enable automatic resource provisioning * `--experimental-auto-create` `boolean` alias: --x-auto-createdefault: true Automatically provision draft bindings with new resources * `--install-skills` `boolean` default: false Install Cloudflare skills for detected AI coding agents before running the command * `--profile` `string` Use a specific auth profile ### `secrets-store secret list` List secrets within a store npmyarnpnpm ``` npx wrangler secrets-store secret list [STORE-ID] ``` ``` yarn wrangler secrets-store secret list [STORE-ID] ``` ``` pnpm wrangler secrets-store secret list [STORE-ID] ``` * `[STORE-ID]` `string` required ID of the store in which to list secrets * `--page` `number` default: 1 Page number of secrets listing results, can configure page size using "per-page" * `--per-page` `number` default: 10 Number of secrets to show per page * `--remote` `boolean` default: false Execute command against remote Secrets Store * `--persist-to` `string` Directory for local persistence Global flags * `--v` `boolean` alias: --version Show version number * `--cwd` `string` Run as if Wrangler was started in the specified directory instead of the current working directory * `--config` `string` alias: --c Path to Wrangler configuration file * `--env` `string` alias: --e Environment to use for operations, and for selecting .env and .dev.vars files * `--env-file` `string` Path to an .env file to load - can be specified multiple times - values from earlier files are overridden by values in later files * `--experimental-provision` `boolean` aliases: --x-provisiondefault: true Experimental: Enable automatic resource provisioning * `--experimental-auto-create` `boolean` alias: --x-auto-createdefault: true Automatically provision draft bindings with new resources * `--install-skills` `boolean` default: false Install Cloudflare skills for detected AI coding agents before running the command * `--profile` `string` Use a specific auth profile ## `secrets-store store` Use the following commands to manage your store. Store limitation [Secrets Store](https://docs-durable-objects-instance-replaced-errors.previews.developers.cloudflare.com/secrets-store/) is in open beta. Currently, you can only have one store per Cloudflare account. ### `secrets-store store create` Create a store within an account npmyarnpnpm ``` npx wrangler secrets-store store create [NAME] ``` ``` yarn wrangler secrets-store store create [NAME] ``` ``` pnpm wrangler secrets-store store create [NAME] ``` * `[NAME]` `string` required Name of the store * `--remote` `boolean` default: false Execute command against remote Secrets Store Global flags * `--v` `boolean` alias: --version Show version number * `--cwd` `string` Run as if Wrangler was started in the specified directory instead of the current working directory * `--config` `string` alias: --c Path to Wrangler configuration file * `--env` `string` alias: --e Environment to use for operations, and for selecting .env and .dev.vars files * `--env-file` `string` Path to an .env file to load - can be specified multiple times - values from earlier files are overridden by values in later files * `--experimental-provision` `boolean` aliases: --x-provisiondefault: true Experimental: Enable automatic resource provisioning * `--experimental-auto-create` `boolean` alias: --x-auto-createdefault: true Automatically provision draft bindings with new resources * `--install-skills` `boolean` default: false Install Cloudflare skills for detected AI coding agents before running the command * `--profile` `string` Use a specific auth profile The following is an example of using the `create` command to create a store. ```sh npx wrangler secrets-store store create default --remote ``` ```sh ๐Ÿ” Creating store... (Name: default) โœ… Created store! (Name: default, ID: 2e2a82d317134506b58defbe16982d54) ``` ### `secrets-store store delete` Delete a store within an account npmyarnpnpm ``` npx wrangler secrets-store store delete [STORE-ID] ``` ``` yarn wrangler secrets-store store delete [STORE-ID] ``` ``` pnpm wrangler secrets-store store delete [STORE-ID] ``` * `[STORE-ID]` `string` required ID of the store * `--remote` `boolean` default: false Execute command against remote Secrets Store Global flags * `--v` `boolean` alias: --version Show version number * `--cwd` `string` Run as if Wrangler was started in the specified directory instead of the current working directory * `--config` `string` alias: --c Path to Wrangler configuration file * `--env` `string` alias: --e Environment to use for operations, and for selecting .env and .dev.vars files * `--env-file` `string` Path to an .env file to load - can be specified multiple times - values from earlier files are overridden by values in later files * `--experimental-provision` `boolean` aliases: --x-provisiondefault: true Experimental: Enable automatic resource provisioning * `--experimental-auto-create` `boolean` alias: --x-auto-createdefault: true Automatically provision draft bindings with new resources * `--install-skills` `boolean` default: false Install Cloudflare skills for detected AI coding agents before running the command * `--profile` `string` Use a specific auth profile The following is an example of using the `delete` command to delete a store. ```sh npx wrangler secrets-store store delete d2dafaeac9434de2b6d08b292ce08211 --remote ``` ```sh ๐Ÿ” Deleting store... (Name: d2dafaeac9434de2b6d08b292ce08211) โœ… Deleted store! (ID: d2dafaeac9434de2b6d08b292ce08211) ``` ### `secrets-store store list` List stores within an account npmyarnpnpm ``` npx wrangler secrets-store store list ``` ``` yarn wrangler secrets-store store list ``` ``` pnpm wrangler secrets-store store list ``` * `--page` `number` default: 1 Page number of stores listing results, can configure page size using "per-page" * `--per-page` `number` default: 10 Number of stores to show per page * `--remote` `boolean` default: false Execute command against remote Secrets Store Global flags * `--v` `boolean` alias: --version Show version number * `--cwd` `string` Run as if Wrangler was started in the specified directory instead of the current working directory * `--config` `string` alias: --c Path to Wrangler configuration file * `--env` `string` alias: --e Environment to use for operations, and for selecting .env and .dev.vars files * `--env-file` `string` Path to an .env file to load - can be specified multiple times - values from earlier files are overridden by values in later files * `--experimental-provision` `boolean` aliases: --x-provisiondefault: true Experimental: Enable automatic resource provisioning * `--experimental-auto-create` `boolean` alias: --x-auto-createdefault: true Automatically provision draft bindings with new resources * `--install-skills` `boolean` default: false Install Cloudflare skills for detected AI coding agents before running the command * `--profile` `string` Use a specific auth profile The following is an example of using the `list` command to list stores. ```sh npx wrangler secrets-store store list --remote ``` ```sh ๐Ÿ” Listing stores... โ”Œโ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”ฌโ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”ฌโ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”ฌโ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”ฌโ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ” โ”‚ Name โ”‚ ID โ”‚ AccountID โ”‚ Created โ”‚ Modified โ”‚ โ”œโ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”ผโ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”ผโ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”ผโ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”ผโ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”ค โ”‚ default โ”‚ 8876bad33f164462bf0743fe8adf98f4 โ”‚ REDACTED โ”‚ 4/9/2025, 1:11:48 PM โ”‚ 4/9/2025, 1:11:48 PM โ”‚ โ””โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”ดโ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”ดโ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”ดโ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”ดโ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”˜ ``` Was this helpful? YesNo ## On this page [![](https://docs-durable-objects-instance-replaced-errors.previews.developers.cloudflare.com/_astro/logo.te5VL_aD.svg)Docs](https://docs-durable-objects-instance-replaced-errors.previews.developers.cloudflare.com/) ```json {"@context":"https://schema.org","@type":"TechArticle","@id":"https://developers.cloudflare.com/workers/wrangler/commands/secrets-store/#page","headline":"Secrets Store ยท Cloudflare Workers docs","description":"Wrangler commands for managing account secrets within a Secrets Store.","url":"https://developers.cloudflare.com/workers/wrangler/commands/secrets-store/","inLanguage":"en","image":"https://developers.cloudflare.com/og-docs.png","dateModified":"2026-08-24","publisher":{"@type":"Organization","name":"Cloudflare","description":"One platform for your apps, agents, and workforce. Build, secure, and scale without managing infrastructure","url":"https://www.cloudflare.com/","sameAs":["https://github.com/cloudflare","https://www.linkedin.com/company/cloudflare","https://x.com/cloudflare"],"logo":{"@type":"ImageObject","url":"https://developers.cloudflare.com/logo.svg"},"address":{"@type":"PostalAddress","streetAddress":"101 Townsend St","addressLocality":"San Francisco","addressRegion":"CA","postalCode":"94107","addressCountry":"US"},"contactPoint":[{"@type":"ContactPoint","contactType":"Customer Support","url":"https://support.cloudflare.com/","availableLanguage":["English"]},{"@type":"ContactPoint","contactType":"Sales","url":"https://www.cloudflare.com/contact/","availableLanguage":["English"]}]},"isPartOf":{"@type":"WebSite","@id":"https://developers.cloudflare.com/#website","name":"Cloudflare Docs","url":"https://developers.cloudflare.com/"}} ```