diff --git a/cmd/onecli/secrets.go b/cmd/onecli/secrets.go
index 343f271..ad233a4 100644
--- a/cmd/onecli/secrets.go
+++ b/cmd/onecli/secrets.go
@@ -51,7 +51,7 @@ func (c *SecretsListCmd) Run(out *output.Writer) error {
 type SecretsCreateCmd struct {
 	Project     string `optional:"" short:"p" help:"Project slug."`
 	Name        string `required:"" help:"Display name for the secret."`
-	Type        string `required:"" help:"Secret type: 'anthropic' or 'generic'."`
+	Type        string `required:"" help:"Secret type: 'anthropic', 'openai', or 'generic'."`
 	Value       string `required:"" help:"Secret value (e.g. API key)."`
 	HostPattern string `required:"" name:"host-pattern" help:"Host pattern to match (e.g. 'api.anthropic.com')."`
 	PathPattern string `optional:"" name:"path-pattern" help:"Path pattern to match (e.g. '/v1/*')."`
@@ -93,8 +93,8 @@ func (c *SecretsCreateCmd) Run(out *output.Writer) error {
 		}
 	}
 
-	if input.Type != "anthropic" && input.Type != "generic" {
-		return fmt.Errorf("invalid type %q: must be 'anthropic' or 'generic'", input.Type)
+	if input.Type != "anthropic" && input.Type != "openai" && input.Type != "generic" {
+		return fmt.Errorf("invalid type %q: must be 'anthropic', 'openai', or 'generic'", input.Type)
 	}
 
 	if c.DryRun {