---
title: "Create Vault Secret"
method: POST
path: "/api/v1/vault/secrets"
tags: ["Vault Secrets"]
---

# Create Vault Secret

`POST /api/v1/vault/secrets`

## Request body

- VaultSecretCreateRequest
  - `id` string, uuid, required
  - `name` string, required — Plaintext display name for listing the secret, such as 'AWS Production'.
  - `description` string, nullable — Optional freeform context describing when and how to use this credential.
  - `secret_type` 'api_key' | 'key_pair' | 'login' | 'ssh_key' | 'other', required
  - `encrypted_payload` string, required — AES-256-GCM ciphertext (base64), opaque to server

## Response `201`

Successful Response

- VaultSecretResponse
  - `id` string, uuid, required
  - `name` string, required
  - `description` string, nullable, required
  - `secret_type` 'api_key' | 'key_pair' | 'login' | 'ssh_key' | 'other', required
  - `access` VaultSecretAccessResponse[]
    - `id` string, uuid, required
    - `vault_secret_id` string, uuid, required
    - `identity_id` string, uuid, required
    - `created_at` string, date-time, required
  - `created_at` string, date-time, required
  - `updated_at` string, date-time, required

## Other responses

- `422` — Validation Error
- `4XX` — Client error with Support Agent information.
- `5XX` — Server error with Support Agent information.

---

[API](https://skmtc.dev/inkbox/apis/inkbox-api.md) · [All operations](https://skmtc.dev/inkbox/apis/inkbox-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/inkbox/inkbox-api/revisions/31f357e7e6f8/schema)