vaults

Unseal a vault

Changed on Oct 28, 2026

Exchange the key you hold for a short-lived Vault Access Token (VAT). Supply exactly ONE of vmk — the Vault Master Key returned when the vault was created — or dvak_token, a DVAK token issued for this vault, named exactly as the create response returned it. Sending both, or neither, is rejected 400. A DVAK token placed in vmk is accepted too and read as a DVAK. Unsealing with a DVAK mints a VAT that inherits that key's access level; unsealing with the VMK mints a read_write VAT. From there the VAT is the credential every ingot operation carries — the key is not needed again until the VAT expires.

post/vaults/{id}/unseal

Request

Base URL
https://api.sparkvault.com/v1
Auth
- API key in header X-API-Key
- or HTTP bearer
TypeScript
https://skmtc.dev/sparkvault/apis/sparkvault-api/docs/vaults/:id/unseal/post.ts
A function with typed inputs. Its response is checked against the schema.

Path parameters

idstring required

Request body

vmkstring

The Vault Master Key. A DVAK token presented here is accepted too, and read as a DVAK.

dvak_tokenstring

A DVAK token issued for this vault, exactly as the create response returned it.

ttl_secondsinteger

Lifetime of the returned VAT. Defaults to 3600.

Response

The vault is unsealed and a VAT is issued.

Changes

Oct 28, 2026a9a10e328ba5 Revision changes
- info
  the response property / became required for the status
- info
  the response property / became required for the status
- info
  the response property / became required for the status
- info
  the response property / became required for the status
- info
  the response property / became required for the status
- info
  the response property became required for the status
- info
  the response property became required for the status
- info
  the response property became required for the status
- info
  the response property became required for the status
- info
  the response property became required for the status
- info
  the response property / became required for the status
- info
  the response property / became required for the status
- info
  the response property / became required for the status
- info
  the response property / became required for the status
- info
  the response property / became required for the status
- info
  added the required property / to the response with the status
- info
  added the required property / to the response with the status
- info
  added the required property / to the response with the status
- info
  added the required property / to the response with the status
- info
  added the required property / to the response with the status
Oct 28, 202656d7c265a77a Revision changes
- breaking
  the response property / became nullable for the status
- breaking
  the response property / became nullable for the status
- breaking
  the response property / became nullable for the status
- breaking
  the response property / became nullable for the status
- breaking
  the response property / became nullable for the status

Operation history (3 revisions)