Skip to main content
The Secrets API lets you list, read, update, and delete secrets stored in HashiCorp Vault. Secrets are scoped to the current environment (e.g., oss).

List Secrets

Returns a JSON array of secret names for the current environment.

Example

Response


Get Secret

Sensitive fields are always masked as ••••••••: any field whose name (case-insensitive, ignoring _/-) contains password, passwd, pwd, secret, token, key, credential, signature, bearer, or private — e.g. apiKey, secretKey, accessKey. Non-sensitive fields show their actual values.

Example

Response

Error

Returns 404 if the secret does not exist.

Update Secret

Create or update a secret.
Updating an existing secret replaces its fields with the body you send, with one safeguard: sending the •••••••• mask (or any empty string) for a sensitive field keeps its current value, so you can add or correct one field without re-entering credentials. To remove a field, omit its key from the body. The shared ai-keys store is the exception: fields you omit are kept, and an empty string clears a field.

Example

Response


Delete Secret

Example

Response