credential management
Migrate Encryption Endpoint
Re-encrypt all at-rest credentials into the AES-256-GCM (v2:gcm:) format.
Admin only. Requires general_settings.encryption_algorithm: aes-256-gcm. Idempotent and resumable — re-running skips already-migrated values. Pass dry_run=true for a non-mutating scan (equivalent to --check).
post/credentials/migrate-encryption
Query parameters
dry_runboolean
If true, scan and report without writing any changes.
If true, scan and report without writing any changes.
Response
Successful Response
{"stackTrail":"paths:/credentials/migrate-encryption:post:responses:200:content:application/json:schema","oasType":"schema","type":"unknown"}