Store an encrypted credential

Envelope-encrypt and store a secret in the wallet's vault (AES-256-GCM, per-wallet DEK). Never returned raw — injected only under a scoped execution JWT with clearance ≥ the credential's bar. Owner-only.

post/credentials/vault

Request

  • Base URL: https://getsanction.com/api/v1
  • URL: https://getsanction.com/api/v1/credentials/vault
  • Auth: API key in header x-mgmt-key

Request body

wallet_idstring required
labelstring required
type'api_key' | 'oauth_token' | 'certificate' | 'license' | 'password' required
valuestring required

The plaintext secret; stored encrypted, never returned

allowed_agent_idsstring[]
scopesstring[]
min_clearanceinteger
expires_atstring date-time

Response

Stored (value returned as [encrypted])

Changes

No recorded changes to this operation across all 1 revision of this API.