Sign in
credentials

Upsert Credential

Store or rotate one credential.

A rotation replaces the whole login; there is no endpoint that reads one back, by construction rather than by permission — a lost password is re-entered, not recovered.

put/credentials/{system}/{account_key}

Path parameters

system'servicetitan' | 'aspire' | 'housecall_pro' | 'portal' | 'rebates' | 'permit' | 'other' required
account_keystring required

Request body

labelstring nullable

The customer's name for this login

usernamestring nullable

Account username; stored plaintext, not a secret

login_urlstring required

Where this login is used; required, and drives the site icon

passwordstring password nullable

Account password; encrypted

totp_secretstring password nullable

Base32 TOTP seed; encrypted, optional

extra_secretsobject

Any further named secrets this sign-in needs — a company code, a PIN, a second passphrase. Encrypted alongside the password; the NAMES are stored in the clear so the list can show what a credential holds.

Response

Successful Response

idstring nullable

Null for a credential not yet in the store

organization_idstring required
systemstring required
account_keystring required
labelstring nullable
usernamestring nullable
login_urlstring nullable
field_namesstring[]

Which secrets are held

storage'encrypted' | 'onepassword' | 'legacy_plaintext'
managed_bystring

'customer' or 'noso_ops'

statusstring
created_bystring nullable
created_atstring date-time nullable
last_rotated_atstring date-time nullable
last_used_atstring date-time nullable

Last successful unwrap by Pilot

Changes

Changed in 3 of the 23 revisions of this API.3