Secrets API

All endpoints require authentication via Bearer token.

List Vaults

GET/api/secrets/vaults
Response (200)
json
[
  {
    "id": "vault-uuid",
    "name": "Personal Vault",
    "team_id": null,
    "is_encrypted": true,
    "is_owner": true,
    "secret_count": 12,
    "created_at": "2026-03-01T12:00:00Z"
  }
]

Create Vault

POST/api/secrets/vaults
Request
json
{
  "name": "Production",
  "is_encrypted": true,
  "password_hash": "sha256-hash"
}

List Secrets

GET/api/secrets/vaults/:vault_id/secrets
Response (200)
json
[
  {
    "id": "secret-uuid",
    "name": "DATABASE_URL",
    "category": "Environment",
    "note": "encrypted-blob",
    "position": 0,
    "created_at": "2026-03-01T12:00:00Z",
    "updated_at": "2026-03-01T12:00:00Z"
  }
]

Create Secret

POST/api/secrets/vaults/:vault_id/secrets
Request
json
{
  "name": "STRIPE_KEY",
  "category": "API Key",
  "note": "encrypted-value",
  "group_id": "group-uuid"
}

Update Secret

PUT/api/secrets/vaults/:vault_id/secrets/:secret_id

Delete Secret

DELETE/api/secrets/vaults/:vault_id/secrets/:secret_id
PreviousAuthenticationNextAgents API