---
title: "Store a platform API key for live imports (sealed at rest)"
method: POST
path: "/api/flows/credentials"
tags: ["Flows"]
---

# Store a platform API key for live imports (sealed at rest)

`POST /api/flows/credentials`

## Request

- Base URL: `https://api.wordis-bond.com`
- URL: `https://api.wordis-bond.com/api/flows/credentials`
- Auth: HTTP bearer

Store a customer platform API key for a live import. The key is sealed with AES-256-GCM at rest and never returned or logged — only a masked hint comes back.

## Request body

- object
  - `platform` 'vapi', required
  - `apiKey` string, required

## Response `201`

Stored

- object
  - `data` object, required
  - `error` union, required
    - object
    - string

## Other responses

- `401`: Missing, invalid, or revoked credentials.
- `422`: The request body failed validation.

---

[API](https://skmtc.dev/wordis-bond/apis/word-is-bond-voice-agent-testing-api.md) · [All operations](https://skmtc.dev/wordis-bond/apis/word-is-bond-voice-agent-testing-api/llms.txt) · [OpenAPI document](https://skmtc.dev/wordis-bond/apis/word-is-bond-voice-agent-testing-api/revisions/66c2d5480d84?raw)