Skip to main content
POST
Create a credential vault

Authorizations

Authorization
string
header
required

A Recursion API key, created in the console under API keys.

Body

application/json

Request body for creating a vault: the container that credentials are added to and that sessions are granted. Creating a vault stores no secret material of its own.

display_name
string
required

Operator-facing label for the vault, shown wherever grants are reviewed. Required.

idempotency_key
string

Optional retry key scoped to the authenticated organization. Reusing it with different creation details is a conflict.

Maximum string length: 128
metadata
object

Free-form caller-owned JSON stored with the vault and returned on reads. Not interpreted by the service; never put secret material here.

Response

A named group of credentials an agent session may be granted. A session references vaults by id; the credential values inside are resolved at execution time and are never returned over the API.

A named group of credentials an agent session may be granted. A session references vaults by id; the credential values inside are resolved at execution time and are never returned over the API.

created_at
string<date-time>
required

RFC 3339 timestamp of when this record was created. Server-assigned.

credential_count
integer
required

How many credentials this vault currently holds, so a list view need not fetch each vault's credentials.

display_name
string
required

Operator-facing label for the vault, shown wherever vaults are listed.

organization_id
string
required

Organization that owns this record. Resolved from the API key; never accepted from the caller.

updated_at
string<date-time>
required

RFC 3339 timestamp of the last change to this record. Server-assigned.

vault_id
string
required

Identifier for this vault (UUID). Server-assigned.

metadata
object

Free-form caller-supplied key/value labels. Stored verbatim and never interpreted by the service.