company-member-sites-v2026-10
Set a company site's environment variable
Adds the variable the path names to a company site, or replaces its value and secrecy. Mark API keys and passwords secret: the value is stored encrypted and never read back, so the answer’s value is null. A site holds at most 64 variables, and a value is 1 to 5,120 bytes. When a published version of the site has server functions, the change is passed to them at once.
Needs application_themes.update and a signed-in admin. A member’s site is refused with 404. It answers 404 until the sites gateway is released to the company. A droplet installation token and an OAuth client token are refused with 403.
PUT
/
api
/
company
/
v2026-10
/
member-sites
/
{id}
/
env-vars
/
{name}
Set a company site's environment variable
curl --request PUT \
--url https://api.fluid.app/api/company/v2026-10/member-sites/{id}/env-vars/{name} \
--header 'Authorization: Bearer <token>' \
--header 'Content-Type: application/json' \
--data '
{
"value": "sk_live_51H",
"secret": true
}
'import requests
url = "https://api.fluid.app/api/company/v2026-10/member-sites/{id}/env-vars/{name}"
payload = {
"value": "sk_live_51H",
"secret": True
}
headers = {
"Authorization": "Bearer <token>",
"Content-Type": "application/json"
}
response = requests.put(url, json=payload, headers=headers)
print(response.text)const options = {
method: 'PUT',
headers: {Authorization: 'Bearer <token>', 'Content-Type': 'application/json'},
body: JSON.stringify({value: 'sk_live_51H', secret: true})
};
fetch('https://api.fluid.app/api/company/v2026-10/member-sites/{id}/env-vars/{name}', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));<?php
$curl = curl_init();
curl_setopt_array($curl, [
CURLOPT_URL => "https://api.fluid.app/api/company/v2026-10/member-sites/{id}/env-vars/{name}",
CURLOPT_RETURNTRANSFER => true,
CURLOPT_ENCODING => "",
CURLOPT_MAXREDIRS => 10,
CURLOPT_TIMEOUT => 30,
CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
CURLOPT_CUSTOMREQUEST => "PUT",
CURLOPT_POSTFIELDS => json_encode([
'value' => 'sk_live_51H',
'secret' => true
]),
CURLOPT_HTTPHEADER => [
"Authorization: Bearer <token>",
"Content-Type: application/json"
],
]);
$response = curl_exec($curl);
$err = curl_error($curl);
curl_close($curl);
if ($err) {
echo "cURL Error #:" . $err;
} else {
echo $response;
}package main
import (
"fmt"
"strings"
"net/http"
"io"
)
func main() {
url := "https://api.fluid.app/api/company/v2026-10/member-sites/{id}/env-vars/{name}"
payload := strings.NewReader("{\n \"value\": \"sk_live_51H\",\n \"secret\": true\n}")
req, _ := http.NewRequest("PUT", url, payload)
req.Header.Add("Authorization", "Bearer <token>")
req.Header.Add("Content-Type", "application/json")
res, _ := http.DefaultClient.Do(req)
defer res.Body.Close()
body, _ := io.ReadAll(res.Body)
fmt.Println(string(body))
}HttpResponse<String> response = Unirest.put("https://api.fluid.app/api/company/v2026-10/member-sites/{id}/env-vars/{name}")
.header("Authorization", "Bearer <token>")
.header("Content-Type", "application/json")
.body("{\n \"value\": \"sk_live_51H\",\n \"secret\": true\n}")
.asString();require 'uri'
require 'net/http'
url = URI("https://api.fluid.app/api/company/v2026-10/member-sites/{id}/env-vars/{name}")
http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true
request = Net::HTTP::Put.new(url)
request["Authorization"] = 'Bearer <token>'
request["Content-Type"] = 'application/json'
request.body = "{\n \"value\": \"sk_live_51H\",\n \"secret\": true\n}"
response = http.request(request)
puts response.read_body{
"env_var": {
"name": "STRIPE_KEY",
"secret": true,
"value": null,
"created_at": "2026-11-10T09:00:00.000Z",
"updated_at": "2026-11-10T09:00:00.000Z"
},
"status": 200,
"meta": {
"request_uuid": "3b8f1d27-6c4e-4a91-8e5d-2f7c9a1b0e64",
"timestamp": "2026-11-10T09:00:00Z"
}
}{
"env_var": {
"name": "STRIPE_KEY",
"secret": true,
"value": null,
"created_at": "2026-11-10T09:00:00.000Z",
"updated_at": "2026-11-10T09:00:00.000Z"
},
"status": 201,
"meta": {
"request_uuid": "3b8f1d27-6c4e-4a91-8e5d-2f7c9a1b0e64",
"timestamp": "2026-11-10T09:00:00Z"
}
}{}{}{
"error": {
"message": "<string>",
"details": {}
},
"status": 123,
"meta": {
"request_uuid": "<string>",
"timestamp": "2023-11-07T05:31:56Z"
}
}{
"error": {
"message": "<string>",
"details": {}
},
"status": 123,
"meta": {
"request_uuid": "<string>",
"timestamp": "2023-11-07T05:31:56Z"
}
}{
"error": {
"message": "<string>",
"details": {}
},
"status": 123,
"meta": {
"request_uuid": "<string>",
"timestamp": "2023-11-07T05:31:56Z"
}
}{
"error": {
"message": "<string>",
"details": {}
},
"status": 123,
"meta": {
"request_uuid": "<string>",
"timestamp": "2023-11-07T05:31:56Z"
}
}Authorizations
A company admin credential for your company, or a droplet installation token with the website scope for reads, except on the share routes, which refuse a droplet token.
Path Parameters
The site's id.
The variable's name: a capital letter, then up to 63 capital letters, digits and underscores, not starting with FLUID_.
Pattern:
^[A-Za-z0-9_]+$Body
application/json
Response
The variable was replaced.
One environment variable.
One environment variable of a site. The site's server functions receive every variable, secret or not, by name in ctx.secrets. A secret's value is stored encrypted and never read back, so it is null here.
Show child attributes
Show child attributes
The HTTP status.
Response metadata included on every response body.
Show child attributes
Show child attributes
⌘I
Set a company site's environment variable
curl --request PUT \
--url https://api.fluid.app/api/company/v2026-10/member-sites/{id}/env-vars/{name} \
--header 'Authorization: Bearer <token>' \
--header 'Content-Type: application/json' \
--data '
{
"value": "sk_live_51H",
"secret": true
}
'import requests
url = "https://api.fluid.app/api/company/v2026-10/member-sites/{id}/env-vars/{name}"
payload = {
"value": "sk_live_51H",
"secret": True
}
headers = {
"Authorization": "Bearer <token>",
"Content-Type": "application/json"
}
response = requests.put(url, json=payload, headers=headers)
print(response.text)const options = {
method: 'PUT',
headers: {Authorization: 'Bearer <token>', 'Content-Type': 'application/json'},
body: JSON.stringify({value: 'sk_live_51H', secret: true})
};
fetch('https://api.fluid.app/api/company/v2026-10/member-sites/{id}/env-vars/{name}', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));<?php
$curl = curl_init();
curl_setopt_array($curl, [
CURLOPT_URL => "https://api.fluid.app/api/company/v2026-10/member-sites/{id}/env-vars/{name}",
CURLOPT_RETURNTRANSFER => true,
CURLOPT_ENCODING => "",
CURLOPT_MAXREDIRS => 10,
CURLOPT_TIMEOUT => 30,
CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
CURLOPT_CUSTOMREQUEST => "PUT",
CURLOPT_POSTFIELDS => json_encode([
'value' => 'sk_live_51H',
'secret' => true
]),
CURLOPT_HTTPHEADER => [
"Authorization: Bearer <token>",
"Content-Type: application/json"
],
]);
$response = curl_exec($curl);
$err = curl_error($curl);
curl_close($curl);
if ($err) {
echo "cURL Error #:" . $err;
} else {
echo $response;
}package main
import (
"fmt"
"strings"
"net/http"
"io"
)
func main() {
url := "https://api.fluid.app/api/company/v2026-10/member-sites/{id}/env-vars/{name}"
payload := strings.NewReader("{\n \"value\": \"sk_live_51H\",\n \"secret\": true\n}")
req, _ := http.NewRequest("PUT", url, payload)
req.Header.Add("Authorization", "Bearer <token>")
req.Header.Add("Content-Type", "application/json")
res, _ := http.DefaultClient.Do(req)
defer res.Body.Close()
body, _ := io.ReadAll(res.Body)
fmt.Println(string(body))
}HttpResponse<String> response = Unirest.put("https://api.fluid.app/api/company/v2026-10/member-sites/{id}/env-vars/{name}")
.header("Authorization", "Bearer <token>")
.header("Content-Type", "application/json")
.body("{\n \"value\": \"sk_live_51H\",\n \"secret\": true\n}")
.asString();require 'uri'
require 'net/http'
url = URI("https://api.fluid.app/api/company/v2026-10/member-sites/{id}/env-vars/{name}")
http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true
request = Net::HTTP::Put.new(url)
request["Authorization"] = 'Bearer <token>'
request["Content-Type"] = 'application/json'
request.body = "{\n \"value\": \"sk_live_51H\",\n \"secret\": true\n}"
response = http.request(request)
puts response.read_body{
"env_var": {
"name": "STRIPE_KEY",
"secret": true,
"value": null,
"created_at": "2026-11-10T09:00:00.000Z",
"updated_at": "2026-11-10T09:00:00.000Z"
},
"status": 200,
"meta": {
"request_uuid": "3b8f1d27-6c4e-4a91-8e5d-2f7c9a1b0e64",
"timestamp": "2026-11-10T09:00:00Z"
}
}{
"env_var": {
"name": "STRIPE_KEY",
"secret": true,
"value": null,
"created_at": "2026-11-10T09:00:00.000Z",
"updated_at": "2026-11-10T09:00:00.000Z"
},
"status": 201,
"meta": {
"request_uuid": "3b8f1d27-6c4e-4a91-8e5d-2f7c9a1b0e64",
"timestamp": "2026-11-10T09:00:00Z"
}
}{}{}{
"error": {
"message": "<string>",
"details": {}
},
"status": 123,
"meta": {
"request_uuid": "<string>",
"timestamp": "2023-11-07T05:31:56Z"
}
}{
"error": {
"message": "<string>",
"details": {}
},
"status": 123,
"meta": {
"request_uuid": "<string>",
"timestamp": "2023-11-07T05:31:56Z"
}
}{
"error": {
"message": "<string>",
"details": {}
},
"status": 123,
"meta": {
"request_uuid": "<string>",
"timestamp": "2023-11-07T05:31:56Z"
}
}{
"error": {
"message": "<string>",
"details": {}
},
"status": 123,
"meta": {
"request_uuid": "<string>",
"timestamp": "2023-11-07T05:31:56Z"
}
}