Skip to main content
POST
Create an encrypted record

Authorizations

Authorization
string
header
required

Human personal access token (sk-actrl-pat-...).

Body

application/json
accountId
string<uuid>
required

Account that owns the project.

projectId
string<uuid>
required

Project where the record will be created.

name
string
required

Record name.

tags
string[]
required

Searchable labels.

ciphertext
string
required

Client-encrypted secret value.

cipherMeta
object
required

Client-generated encryption metadata.

wrappedDek
object
required

Encrypted record key. AIRCTRL stores it without opening it.

secretFormat
enum<string>
required
Available options:
plain,
json,
env,
password,
api_key,
database,
ssh,
certificate,
oauth_client,
cloud_iam,
service_account,
webhook,
license,
totp
projectWrappedDek
object

Optional record key encrypted for the project key.

secretDueAt
string<date-time> | null

Optional review or expiration time.

rotationIntervalDays
integer | null
Required range: x >= 1

Response

Record created.

ok
enum<boolean>
required
Available options:
true
data
object
required