Set a secret of a Slack app made by hand (owner or admin)
purpose is slack_signing_secret, slack_client_secret or slack_bot_token. Only an app of kind manual takes values from a person: the platform writes the secrets of the apps it created (403 server_managed_secret), since whoever knew an app's signing secret could sign events as Slack. The value is stored encrypted under the app; the response and the set_slack_secret receipt carry its last four characters only. API keys are refused.
Auth: cookie session only; no scope. Idempotency-Key: ignored.
cookieSession__Host-werft_session<token>For the web console: the browser session cookie set by POST /v1/auth/login. It holds the scopes of the user's workspace role (owner: all; admin and member: all but sessions:recover). Requests other than GET must also send X-Requested-With: werft-web.
id*stringThe workspace's id.
^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$uuidapp_id*stringThe Slack app's id.
^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$uuidpurpose*stringWhich of the Slack app's secrets.
"slack_signing_secret""slack_client_secret""slack_bot_token"X-Requested-With?"werft-web"Required with a cookie session: the literal werft-web.
"werft-web"application/json- body
value*string^[\x21-\x7e]+$8 <= length <= 4096Stored; its summary and the receipt.
application/json- response
configured*booleanlast4*|nullupdated_at*|nullupdated_by*|nullreceipt_id*string^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$uuidcurl -X PUT 'https://example.com/v1/workspaces/497f6eca-6276-4993-bfeb-53cbbbba6f08/slack/apps/497f6eca-6276-4993-bfeb-53cbbbba6f08/secrets/slack_signing_secret' \ -H 'Content-Type: application/json' \ -d '{ "value": "<value-from-api.slack.com>"}'{ "configured": true, "last4": "a9f3", "updated_at": "2026-10-23T09:00:00Z", "updated_by": { "user_id": "3e7f1a90-5c2d-4b8e-8f61-2a9d0c4b7e35", "display_name": "Jae" }, "receipt_id": "c4a1e9d2-7b3f-4e8a-a6c5-1d2e3f4a5b6c"}