vaults

Rotate or re-scope a secret in place [write]

Changed on

The secret keeps its id and its placeholder, so attached pods need no restart — the recompiled policy is pushed to them. Fields not sent are left as they are; injection_location merges per field.

patch/vaults/{id}/secrets/{secretId}

Request

  • Base URL
    https://api.agentsky.dev/v1
  • URL
    https://api.agentsky.dev/v1/vaults/{id}/secrets/{secretId}
  • Auth
    HTTP bearer

Path parameters

idstring required

The vault id (vlt_…)

secretIdstring required

The secret id (vsec_…)

Request body

display_namestring
valuestring
tokenstring
allowed_hostsstring[]

Omit to keep the current sites; send a list to replace them, or [] to stop credential injection.

Response

OK

Changes

    • info

      added the optional property / to the response with the status

    • info

      added the optional property / to the response with the status