member-sites-v2026-10

Set a site's environment variable

Adds the variable the path names to one of the member’s sites, or replaces its value and secrecy. Mark API keys and passwords secret: the value is stored encrypted and never read back, so the answer’s value is null. A site holds at most 64 variables, and a value is 1 to 5,120 bytes. When a published version of the site has server functions, the change is passed to them at once.

Bearer only: a request on the cookie mount is refused with 403. It answers 404 until the sites gateway is released to the member’s company, and for a site the member may not change.

PUT

api

member

v2026-10

sites

{site_id}

env-vars

{name}

Set a site's environment variable

curl --request PUT \
  --url https://api.fluid.app/api/member/v2026-10/sites/{site_id}/env-vars/{name} \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '
{
  "value": "sk_live_51H",
  "secret": true
}
'

import requests

url = "https://api.fluid.app/api/member/v2026-10/sites/{site_id}/env-vars/{name}"

payload = {
    "value": "sk_live_51H",
    "secret": True
}
headers = {
    "Authorization": "Bearer <token>",
    "Content-Type": "application/json"
}

response = requests.put(url, json=payload, headers=headers)

print(response.text)

const options = {
  method: 'PUT',
  headers: {Authorization: 'Bearer <token>', 'Content-Type': 'application/json'},
  body: JSON.stringify({value: 'sk_live_51H', secret: true})
};

fetch('https://api.fluid.app/api/member/v2026-10/sites/{site_id}/env-vars/{name}', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://api.fluid.app/api/member/v2026-10/sites/{site_id}/env-vars/{name}",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "PUT",
  CURLOPT_POSTFIELDS => json_encode([
    'value' => 'sk_live_51H',
    'secret' => true
  ]),
  CURLOPT_HTTPHEADER => [
    "Authorization: Bearer <token>",
    "Content-Type: application/json"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"strings"
	"net/http"
	"io"
)

func main() {

	url := "https://api.fluid.app/api/member/v2026-10/sites/{site_id}/env-vars/{name}"

	payload := strings.NewReader("{\n  \"value\": \"sk_live_51H\",\n  \"secret\": true\n}")

	req, _ := http.NewRequest("PUT", url, payload)

	req.Header.Add("Authorization", "Bearer <token>")
	req.Header.Add("Content-Type", "application/json")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

HttpResponse<String> response = Unirest.put("https://api.fluid.app/api/member/v2026-10/sites/{site_id}/env-vars/{name}")
  .header("Authorization", "Bearer <token>")
  .header("Content-Type", "application/json")
  .body("{\n  \"value\": \"sk_live_51H\",\n  \"secret\": true\n}")
  .asString();

require 'uri'
require 'net/http'

url = URI("https://api.fluid.app/api/member/v2026-10/sites/{site_id}/env-vars/{name}")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Put.new(url)
request["Authorization"] = 'Bearer <token>'
request["Content-Type"] = 'application/json'
request.body = "{\n  \"value\": \"sk_live_51H\",\n  \"secret\": true\n}"

response = http.request(request)
puts response.read_body

{
  "status": 200,
  "data": {
    "name": "STRIPE_KEY",
    "secret": true,
    "value": null,
    "created_at": "2026-11-10T09:00:00.000Z",
    "updated_at": "2026-11-10T09:10:00.000Z"
  },
  "meta": {
    "request_uuid": "0192f4c8-5b6c-7d74-a3e8-0f1a2b3c4d5e",
    "timestamp": "2026-11-10T09:10:00Z"
  }
}

{
  "status": 201,
  "data": {
    "name": "STRIPE_KEY",
    "secret": true,
    "value": null,
    "created_at": "2026-11-10T09:00:00.000Z",
    "updated_at": "2026-11-10T09:00:00.000Z"
  },
  "meta": {
    "request_uuid": "0192f4c8-5b6c-7d74-a3e8-0f1a2b3c4d5e",
    "timestamp": "2026-11-10T09:00:00Z"
  }
}

{
  "status": 123,
  "error": {
    "message": "<string>",
    "details": {}
  },
  "meta": {
    "request_uuid": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
    "timestamp": "2023-11-07T05:31:56Z"
  }
}

{
  "status": 123,
  "error": {
    "message": "<string>",
    "details": {}
  },
  "meta": {
    "request_uuid": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
    "timestamp": "2023-11-07T05:31:56Z"
  }
}

{
  "status": 123,
  "error": {
    "message": "<string>",
    "details": {}
  },
  "meta": {
    "request_uuid": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
    "timestamp": "2023-11-07T05:31:56Z"
  }
}

{
  "status": 123,
  "error": {
    "message": "<string>",
    "details": {}
  },
  "meta": {
    "request_uuid": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
    "timestamp": "2023-11-07T05:31:56Z"
  }
}

{
  "status": 123,
  "error": {
    "message": "<string>",
    "details": {}
  },
  "meta": {
    "request_uuid": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
    "timestamp": "2023-11-07T05:31:56Z"
  }
}

{
  "status": 123,
  "error": {
    "message": "<string>",
    "details": {}
  },
  "meta": {
    "request_uuid": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
    "timestamp": "2023-11-07T05:31:56Z"
  }
}

Authorizations

Authorization

string

header

required

A member credential in the Authorization: Bearer header: a member session JWT, a portal JWT whose login is linked to a membership in that company, an opaque member token, or a verified One Auth identity access token. The credential alone identifies the member and company. Member session JWTs, and portal JWTs the server minted read-only, are refused with 403 on every write.

Path Parameters

site_id

string<uuid>

required

Public id of one of the member's sites.

name

string

required

The variable's name: a capital letter, then up to 63 capital letters, digits and underscores, not starting with FLUID_.

Pattern: ^[A-Za-z0-9_]+$

Body

application/json

The value of a variable and whether it is secret. Any other field is refused.

value

string

required

The value, 1 to 5,120 bytes of text.

Minimum string length: 1

secret

boolean

required

Whether the value is secret. Set true for API keys and passwords; the value is then never read back.

Response

The variable was replaced.

One environment variable.

status

integer

required

HTTP status code (mirrors the response status line).

data

object

required

One environment variable of a site. The site's server functions receive every variable, secret or not, by name in ctx.secrets. A secret's value is stored encrypted and never read back, so it is null here.

Show child attributes

meta

object

required

Envelope metadata present on every response.

Show child attributes

Set a site's environment variable

curl --request PUT \
  --url https://api.fluid.app/api/member/v2026-10/sites/{site_id}/env-vars/{name} \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '
{
  "value": "sk_live_51H",
  "secret": true
}
'

import requests

url = "https://api.fluid.app/api/member/v2026-10/sites/{site_id}/env-vars/{name}"

payload = {
    "value": "sk_live_51H",
    "secret": True
}
headers = {
    "Authorization": "Bearer <token>",
    "Content-Type": "application/json"
}

response = requests.put(url, json=payload, headers=headers)

print(response.text)

const options = {
  method: 'PUT',
  headers: {Authorization: 'Bearer <token>', 'Content-Type': 'application/json'},
  body: JSON.stringify({value: 'sk_live_51H', secret: true})
};

fetch('https://api.fluid.app/api/member/v2026-10/sites/{site_id}/env-vars/{name}', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://api.fluid.app/api/member/v2026-10/sites/{site_id}/env-vars/{name}",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "PUT",
  CURLOPT_POSTFIELDS => json_encode([
    'value' => 'sk_live_51H',
    'secret' => true
  ]),
  CURLOPT_HTTPHEADER => [
    "Authorization: Bearer <token>",
    "Content-Type: application/json"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"strings"
	"net/http"
	"io"
)

func main() {

	url := "https://api.fluid.app/api/member/v2026-10/sites/{site_id}/env-vars/{name}"

	payload := strings.NewReader("{\n  \"value\": \"sk_live_51H\",\n  \"secret\": true\n}")

	req, _ := http.NewRequest("PUT", url, payload)

	req.Header.Add("Authorization", "Bearer <token>")
	req.Header.Add("Content-Type", "application/json")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

HttpResponse<String> response = Unirest.put("https://api.fluid.app/api/member/v2026-10/sites/{site_id}/env-vars/{name}")
  .header("Authorization", "Bearer <token>")
  .header("Content-Type", "application/json")
  .body("{\n  \"value\": \"sk_live_51H\",\n  \"secret\": true\n}")
  .asString();

require 'uri'
require 'net/http'

url = URI("https://api.fluid.app/api/member/v2026-10/sites/{site_id}/env-vars/{name}")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Put.new(url)
request["Authorization"] = 'Bearer <token>'
request["Content-Type"] = 'application/json'
request.body = "{\n  \"value\": \"sk_live_51H\",\n  \"secret\": true\n}"

response = http.request(request)
puts response.read_body

{
  "status": 200,
  "data": {
    "name": "STRIPE_KEY",
    "secret": true,
    "value": null,
    "created_at": "2026-11-10T09:00:00.000Z",
    "updated_at": "2026-11-10T09:10:00.000Z"
  },
  "meta": {
    "request_uuid": "0192f4c8-5b6c-7d74-a3e8-0f1a2b3c4d5e",
    "timestamp": "2026-11-10T09:10:00Z"
  }
}

{
  "status": 201,
  "data": {
    "name": "STRIPE_KEY",
    "secret": true,
    "value": null,
    "created_at": "2026-11-10T09:00:00.000Z",
    "updated_at": "2026-11-10T09:00:00.000Z"
  },
  "meta": {
    "request_uuid": "0192f4c8-5b6c-7d74-a3e8-0f1a2b3c4d5e",
    "timestamp": "2026-11-10T09:00:00Z"
  }
}

{
  "status": 123,
  "error": {
    "message": "<string>",
    "details": {}
  },
  "meta": {
    "request_uuid": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
    "timestamp": "2023-11-07T05:31:56Z"
  }
}

{
  "status": 123,
  "error": {
    "message": "<string>",
    "details": {}
  },
  "meta": {
    "request_uuid": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
    "timestamp": "2023-11-07T05:31:56Z"
  }
}

{
  "status": 123,
  "error": {
    "message": "<string>",
    "details": {}
  },
  "meta": {
    "request_uuid": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
    "timestamp": "2023-11-07T05:31:56Z"
  }
}

{
  "status": 123,
  "error": {
    "message": "<string>",
    "details": {}
  },
  "meta": {
    "request_uuid": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
    "timestamp": "2023-11-07T05:31:56Z"
  }
}

{
  "status": 123,
  "error": {
    "message": "<string>",
    "details": {}
  },
  "meta": {
    "request_uuid": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
    "timestamp": "2023-11-07T05:31:56Z"
  }
}

{
  "status": 123,
  "error": {
    "message": "<string>",
    "details": {}
  },
  "meta": {
    "request_uuid": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
    "timestamp": "2023-11-07T05:31:56Z"
  }
}

Overview

Storefront

Commerce

Checkout

Member API

Member Sites APIs

Messaging

People

Payments

DAM

Website

Portal

Mobile app

Content and tools

Analytics

Sales channels

Settings

FairShare SDK

Droplets

Developers

Unsorted endpoints

Portal & Widgets

Set a site's environment variable

Authorizations

Path Parameters

Body

Response