> For AI agents: the complete documentation index is at [llms.txt](https://reflex.dev/docs/llms.txt). For a Markdown version, remove the trailing slash from the page URL and append `.md`. The docs home is available at [index.md](http://localhost:3000/docs/index.md).

# Secrets · Reflex Cloud CLI

## reflex cloud secrets list

Retrieve secrets for a given application.


### Usage

```console
$ reflex cloud secrets list [OPTIONS] APP_ID
```


### Options

* `--token TEXT`: The authentication token.
* `--loglevel [debug|default|info|warning|error|critical]`: The log level to use.
* `--json, -j / --no-json`: Output the result as a single JSON document on stdout. Human-readable messages go to stderr instead, so stdout stays parseable.
* `--interactive, -i / --no-interactive`: Whether to prompt for confirmations and choices. Defaults to on when stdout is a terminal and off otherwise, so a pipe, a CI job or an agent is never left waiting at a prompt.
* `--help`: Show this message and exit.



## reflex cloud secrets delete

Delete a secret for a given application.


### Usage

```console
$ reflex cloud secrets delete [OPTIONS] APP_ID KEY
```


### Options

* `--token TEXT`: The authentication token.
* `--reboot / --no-reboot`: Automatically reboot your site with the new secrets
* `--loglevel [debug|default|info|warning|error|critical]`: The log level to use.
* `--json, -j / --no-json`: Output the result as a single JSON document on stdout. Human-readable messages go to stderr instead, so stdout stays parseable.
* `--interactive, -i / --no-interactive`: Whether to prompt for confirmations and choices. Defaults to on when stdout is a terminal and off otherwise, so a pipe, a CI job or an agent is never left waiting at a prompt.
* `--help`: Show this message and exit.



## reflex cloud secrets update

Update secrets for a given application.


### Usage

```console
$ reflex cloud secrets update [OPTIONS] APP_ID
```


### Options

* `--envfile TEXT`: The path to an env file to use. Will override any envs set manually.
* `--env TEXT`: The environment variables to set: <key>=<value>. Required if envfile is not specified. For multiple envs, repeat this option, e.g. --env k1=v2 --env k2=v2.
* `--reboot / --no-reboot`: Automatically reboot your site with the new secrets
* `--token TEXT`: The authentication token.
* `--loglevel [debug|default|info|warning|error|critical]`: The log level to use.
* `--json, -j / --no-json`: Output the result as a single JSON document on stdout. Human-readable messages go to stderr instead, so stdout stays parseable.
* `--interactive, -i / --no-interactive`: Whether to prompt for confirmations and choices. Defaults to on when stdout is a terminal and off otherwise, so a pipe, a CI job or an agent is never left waiting at a prompt.
* `--help`: Show this message and exit.