Create, update and delete a single secret in Infisical via the REST API

Documented steps

1. Authenticate as a machine identity via Universal Auth and confirm its project role grants write/delete on the target environment and path.
2. CREATE: POST /api/v4/secrets/{secretName} with JSON body containing projectId, environment and secretValue (required), plus optional secretPath (default '/'), secretComment, secretMetadata, tagIds and type (shared or personal, default shared).
3. Example: curl --request POST --url 'https://us.infisical.com/api/v4/secrets/MY_SECRET' --header 'Authorization: Bearer <ACCESS_TOKEN>' --header 'Content-Type: application/json' --data '{"projectId":"<PROJECT_ID>","environment":"prod","secretValue":"hunter2","secretPath":"/"}'
4. READ one secret: GET /api/v4/secrets/{secretName} with projectId, environment and secretPath as query parameters and the same Bearer header.
5. UPDATE: PATCH /api/v4/secrets/{secretName} with the same body shape as create, carrying the new secretValue or fields to change.
6. DELETE: DELETE /api/v4/secrets/{secretName} with a JSON body of projectId, environment, secretPath and type.
7. Swap the base host to https://eu.infisical.com for EU projects or your own domain when self-hosted.
8. Successful create/update/delete calls return 200 with the resulting secret object.
9. Handle 401 by re-authenticating and 403 as a role/permission problem rather than retrying blindly; back off on 429.
10. Official docs (verified 2026-07-29): https://infisical.com/docs/api-reference/endpoints/secrets/create | https://infisical.com/docs/api-reference/endpoints/secrets/delete | https://infisical.com/docs/api-reference/overview/introduction