---
title: "POST /create-usc"
method: POST
path: "/create-usc"
tags: ["Universal Secrets Connector"]
---

# POST /create-usc

`POST /create-usc`

## Request

- Base URL: `https://api.akeyless.io`
- URL: `https://api.akeyless.io/create-usc`
- Auth: none declared

## Request body

- CreateUSC: CreateUSC is a command that creates a Universal Secrets Connector
  - `aws-organization-id` string: The AWS Organization ID to use for a multi-account connector. Requires a target in the AWS Management Account or a delegated administrator account.
  - `azure-kv-name` string: Azure Key Vault name (Relevant only for Azure targets)
  - `delete_protection` string: Protection from accidental deletion of this object [true/false]
  - `description` string: Description of the Universal Secrets Connector
  - `environment-names` string: The environments in repo-name/environment-name format, comma-separated (only relevant for: github-scope=repository-environment)
  - `gcp-folder-id` string: GCP Folder ID (Relevant only for GCP targets with folder scope)
  - `gcp-organization-id` string: GCP Organization ID (Relevant only for GCP targets with folder or organization scope)
  - `gcp-project-id` string: GCP Project ID to manage secrets in (Relevant only for GCP targets with project scope). If empty, the project is taken from the target.
  - `gcp-scope` string: The GCP USC scope [project/folder/organization]. With folder/organization, all projects under the folder/org are manageable. Relevant only for GCP targets. Defaults to project when empty.
  - `gcp-sm-regions` string: GCP Secret Manager regions to query for regional secrets (comma-separated, e.g., us-east1,us-west1). Max 12 regions. Required when listing with object-type=regional-secrets.
  - `github-scope` string: The scope where secrets will be created, available options: [repository, organization, repository-environment]
  - `item-custom-fields` object: Additional custom fields to associate with the item
  - `json` boolean: Set output format to JSON
  - `k8s-namespace` string: K8s namespace (Relevant to Kubernetes targets)
  - `name` string, required: Universal Secrets Connector name
  - `organization-name` string: The organization name to create the secret in
  - `repository-access` string
  - `repository-names` string: The repository names, comma-separated (only relevant for: github-scope=repository)
  - `tags` string[]: List of the tags attached to this Universal Secrets Connector
  - `target-to-associate` string, required: Target Universal Secrets Connector to connect
  - `token` string: Authentication token (see `/auth` and `/configure`)
  - `uid-token` string: The universal identity token, Required only for universal_identity authentication
  - `usc-prefix` string: Prefix for all secrets created in AWS Secrets Manager
  - `usc-tags` string: Comma-separated list of tags to apply to all secrets created on the remote USC
  - `use-prefix-as-filter` string: Whether to filter the USC secret list using the specified usc-prefix [true/false]
  - `use-tags-as-filter` boolean: Filter the USC secret list by the value(s) of --usc-tags. [true|false]

## Response `201`

CreateUniversalSecretsConnectorResponse wraps response body.

- CreateUSCOutput
  - `universal_secrets_connector_id` integer
  - `universal_secrets_connector_name` string

## Other responses

- `default`: errorResponse wraps any error to return it as a JSON object with one "error" field.

---

[API](https://skmtc.dev/akeyless/apis/infrastructure-connectivity.md) - [All operations](https://skmtc.dev/akeyless/apis/infrastructure-connectivity/llms.txt) - [OpenAPI document](https://skmtc.dev/akeyless/apis/infrastructure-connectivity/revisions/62dc62fea89d?raw)