---
title: "Migrate Encryption Endpoint"
method: POST
path: "/credentials/migrate-encryption"
tags: ["credential management"]
---

# Migrate Encryption Endpoint

`POST /credentials/migrate-encryption`

## Request

- Base URL: `https://api.sea-lion.ai` (the document declares no server; this is the origin it was published from)
- URL: `https://api.sea-lion.ai/credentials/migrate-encryption`
- Auth: API key in header `x-litellm-api-key`

Re-encrypt all at-rest credentials into the AES-256-GCM (``v2:gcm:``) format.

Admin only. Requires ``general_settings.encryption_algorithm: aes-256-gcm``.
Idempotent and resumable — re-running skips already-migrated values. Pass
``dry_run=true`` for a non-mutating scan (equivalent to ``--check``).

## Query parameters

- `dry_run` boolean: If true, scan and report without writing any changes.

## Response `200`

Successful Response

- unknown

## Other responses

- `422`: Validation Error

## Changes

- **2026-10-21** `f2fb14eab3f5`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/sea-lion/apis/litellm-api/changes/credentials/migrate-encryption/post.md)

---

[API](https://skmtc.dev/sea-lion/apis/litellm-api.md) · [All operations](https://skmtc.dev/sea-lion/apis/litellm-api/llms.txt) · [OpenAPI document](https://skmtc.dev/sea-lion/apis/litellm-api/revisions/1ba9123c189a?raw)