Inject a decrypted credential for the current execution

Present a valid execution JWT and receive a decrypted credential value. The credential must be in the JWT scope. Every injection is audit-logged. Raw credential values are never stored in logs — only the credential label and injection timestamp are recorded.

post/credentials/inject

Request

  • Base URL: https://getsanction.com/api/v1
  • URL: https://getsanction.com/api/v1/credentials/inject
  • Auth: HTTP bearer

Request body

credential_labelstring required

Label of the credential to inject. Must be in JWT scope.

Response

Credential injected

labelstring
typestring
valuestring

Decrypted credential value. Valid for the duration of the execution JWT.

injected_atstring date-time
expires_atstring date-time

Changes

No recorded changes to this operation across all 1 revision of this API.