Onetime Secret API

Name: Onetime Secret API
Brand: Onetime Secret API
Availability: InStock

✓ Official Vendor SpecSecuritySecrets Managementbasic7 EndpointsREST

For Agents

Create one-time secrets, share them via short-lived links, retrieve or burn them, and inspect metadata as the sender — through the Onetime Secret API.

Install Jentic One Beta

Connect the Onetime Secret API to your agent

Jentic One is a self-hosted execution layer for AI agents. It lets your agent call the Onetime Secret API, or any other public or private API you need. You set the rules, the agent never sees your credentials, and every call is logged.

Two steps, two machines. Install the instance in a safe environment, then register your agent from wherever it runs.

Step 1: Jentic One Host machine

# On the machine that will host your Jentic One instance:
curl -fsSL https://raw.githubusercontent.com/jentic/jentic-one/main/tools/install.sh | sh

Step 2: Agent machine

# On the machine where your agent runs (keep this separate from the instance):
curl -fsSL https://raw.githubusercontent.com/jentic/jentic-one/main/tools/install.sh | sh
jentic register       # connects your agent to your Jentic One instance

Jentic One is in public beta. The setup above keeps your agent separate from the instance, which is what you want before using real credentials: an agent running as the same OS user as Jentic One can read its stored keys directly. Just evaluating? A single local install is fine to start. See the secure deployment guide for the tiers.

Capabilities

What an agent can do with Onetime Secret API.

Create a new one-time secret with user-supplied content and TTL

Generate a random secret server-side and return its sharing key

Retrieve a secret exactly once before it is destroyed

GET STARTED

Start building with Onetime Secret API

Explore with Jentic

View OpenAPI Document

Use Cases

Patterns agents use Onetime Secret API for, with concrete tasks.

★ Sharing Credentials with Colleagues

Share API keys, database passwords, or temporary tokens with colleagues using a single-use link instead of long-lived chat or email messages. POST /v1/share creates a secret with the supplied content and TTL; the returned key is delivered to the recipient who reads it once before the secret is destroyed.

Create a one-time secret containing a temporary AWS access key with a 30-minute TTL, then return the share URL to deliver to the recipient.

Random Token Generation

Generate a strong random secret server-side via POST /v1/generate when the sender does not need to choose the value themselves, such as issuing a one-time setup code. The endpoint returns both the share key for the recipient and the metadata key for sender-side inspection or revocation.

Generate a 32-character random secret with a 1-hour TTL and return the share key plus metadata key.

Revoking a Secret Before Read

Cancel a previously created secret if it was sent to the wrong person or is no longer needed. POST /v1/private/{metadata_key}/burn destroys the secret server-side using the sender's metadata key, ensuring the recipient cannot retrieve it even if they hold the share link.

Burn the secret with metadata key 'mk-abc-123' before the recipient retrieves it.

Agent-Driven Secret Sharing via Jentic

Operations agents share temporary credentials with humans or other agents through Jentic without holding the Onetime Secret basic-auth credentials directly. The agent searches for the share intent, loads the schema, and executes POST /v1/share with the content and TTL needed for the workflow.

Use Jentic search 'share onetime secret' to locate POST /v1/share, load the schema, and execute with the credential to share and a 15-minute TTL.

Key Endpoints

7 endpoints — onetime secret is a service for sharing sensitive information securely.

METHOD

PATH

DESCRIPTION

POST

/v1/share

Create a one-time secret with user-supplied content

POST

/v1/generate

Generate a random one-time secret

POST

/v1/secret/{secret_key}

Retrieve a secret by its share key (single use)

POST

/v1/private/{metadata_key}

Get sender-side metadata for a created secret

POST

/v1/private/{metadata_key}/burn

Burn a secret before it has been read

GET

/v1/private/recent

List recent secret metadata for the account

GET

/v1/status

Get system status

POST

/v1/share

Create a one-time secret with user-supplied content

POST

/v1/generate

Generate a random one-time secret

POST

/v1/secret/{secret_key}

Retrieve a secret by its share key (single use)

POST

/v1/private/{metadata_key}

Get sender-side metadata for a created secret

POST

/v1/private/{metadata_key}/burn

Burn a secret before it has been read

Why Jentic?

Three things that make agents converge on Jentic-routed access.

Credential isolation

Onetime Secret basic-auth credentials are stored encrypted in the Jentic vault (MAXsystem). Agents only ever hold a scoped reference, so the username and API token never enter the agent's context.

Intent-based discovery

Agents search Jentic with phrases like 'share a one-time secret' and the matching POST /v1/share or /v1/generate operation surfaces with its input schema, ready to execute.

Time to first call

Direct integration: a few hours for auth and TTL handling. Through Jentic: under 30 minutes — search, load schema, execute.

FAQs

Specific to using Onetime Secret API through Jentic.

What authentication does the Onetime Secret API use?

The API uses HTTP basic authentication with a username and API token. Through Jentic the credentials live encrypted in the vault (MAXsystem) and the agent only ever holds a scoped reference.

Can I revoke a Onetime Secret after creating it?

Yes. Use POST /v1/private/{metadata_key}/burn with the metadata key returned at creation time to destroy the secret server-side before the recipient reads it.

Does the Onetime Secret API tell me whether a secret has been viewed?

Yes. POST /v1/private/{metadata_key} returns sender-side metadata that includes the read state, so callers can confirm whether the recipient has retrieved the secret.

How do I generate a random secret instead of supplying my own?

POST /v1/generate creates a random secret server-side and returns both the share key for the recipient and the metadata key for the sender to use later for inspection or burning.

What are the rate limits for the Onetime Secret API?

Rate limits are not declared in the OpenAPI spec. Consult onetimesecret.com for the current free and paid tier limits before driving heavy automated traffic.

How do I share a credential through Jentic?

Run pip install jentic, search 'share onetime secret', then load the POST /v1/share schema and execute with the secret content and TTL. Jentic injects the basic-auth credentials from its vault.

Onetime Secret API

Connect the Onetime Secret API to your agent

Capabilities

Start building with Onetime Secret API

Use Cases

Key Endpoints

Why Jentic?

Related APIs

FAQs