Skip to main content
POST
Create a credential

Authorizations

Authorization
string
header
required

An API key minted in Command Center (Settings -> API Keys), sent as Authorization: Bearer 2501_ak_.... A Command Center session cookie is also accepted.

Body

application/json
name
string
required
Required string length: 1 - 70
type
enum<string>
required
Available options:
SECRET,
VAULT_PATH,
SSH_PRIVATE_KEY
description
string
value
string
vault_path
string
org_id
string | null

Response

The created credential

A credential never carries value: the secret is accepted on create and update, and never returned on any read.

id
string
required
Example:

"cred_1f3c8a90-..."

name
string
required
Example:

"web-01 root key"

org_id
string | null
required

null means tenant-wide - readable by every org

Example:

"org_460b541c-..."

tenant_id
string
required
Example:

"ten_115bea44-..."

type
enum<string>
required
Available options:
SECRET,
VAULT_PATH,
SSH_PRIVATE_KEY
vault_path
string | null
required
Example:

"secret/prod/web-01"

description
string | null
required
created_at
string<date-time>
required
Example:

"2026-08-26T10:00:26.380Z"

updated_at
string<date-time>
required
Example:

"2026-08-26T10:00:26.380Z"