vaults

Create a DVAK

Changed on Oct 28, 2026

Issue a Delegated Vault Access Key: a revocable credential that unseals this vault in place of the VMK, so the VMK itself never has to be shared. Requires the admin role and the VMK, which is verified before the key is minted. The token comes back once and is never retrievable again — afterwards only its last 4 characters are visible, which is also how it is revoked.

post/vaults/{id}/dvaks

Request

Base URL
https://api.sparkvault.com/v1
Auth
- API key in header X-API-Key
- or HTTP bearer
TypeScript
https://skmtc.dev/sparkvault/apis/sparkvault-api/docs/vaults/:id/dvaks/post.ts
A function with typed inputs. Its response is checked against the schema.

Path parameters

idstring required

Request body

vmkstring required

The Vault Master Key, verified before the DVAK is issued.

dvak_type'user' | 'nhi'

Who holds the key: a team member, or a non-human identity.

authorized_user_idstring nullable

The only user who may redeem the key. Required for a user DVAK.

nhi_descriptionstring nullable

What the non-human identity uses the key for. Required for an NHI DVAK.

access_level'read' | 'read_write'

The level the minted key grants. A user key for a View Only member is always read.

Response

The DVAK was issued. Store dvak_token now.

Changes

Oct 28, 2026a9a10e328ba5 Revision changes
- info
  the response property / became required for the status
- info
  the response property / became required for the status
- info
  the response property / became required for the status
- info
  the response property / became required for the status
- info
  the response property became required for the status
- info
  the response property became required for the status
- info
  the response property became required for the status
- info
  the response property became required for the status
- info
  the response property / became required for the status
- info
  the response property / became required for the status
- info
  the response property / became required for the status
- info
  the response property / became required for the status
- info
  added the required property / to the response with the status
- info
  added the required property / to the response with the status
- info
  added the required property / to the response with the status
- info
  added the required property / to the response with the status
Oct 28, 202656d7c265a77a Revision changes
- breaking
  the response property / became nullable for the status
- breaking
  the response property / became nullable for the status
- breaking
  the response property / became nullable for the status
- breaking
  the response property / became nullable for the status

Operation history (3 revisions)