Skip to main content
POST
Save a new encrypted value

Authorizations

Authorization
string
header
required

Human personal access token (sk-actrl-pat-...).

Headers

Idempotency-Key
string

Stable key for safely retrying this write. Reuse the same key only with the same request body; results are retained for 24 hours and conflicting reuse returns 409.

Path Parameters

id
string
required

Body

application/json
dekVersion
integer
required

Record DEK version read before opening its source wrapper.

Required range: x >= 1
sourceWrappedDek
object
required

Exact encrypted source wrapper opened by the client; never plaintext key material.

sourceVersionId
string<uuid> | null
required

Current content version read by the client; null for an empty Environment variant or an unversioned legacy record.

ciphertext
string
required

Client-encrypted replacement value.

cipherMeta
object
required

Client-generated encryption metadata.

sourceProjectKeyVersion
integer

Required only when the source is the project copy; omit for an individual wrapper.

Required range: x >= 1
environment
enum<string>

Required to edit one Environment value; omit for General.

Available options:
development,
staging,
production
changedFields
string[]

Changed field names. Values are never included in audit data.

Response

New record version saved.

ok
enum<boolean>
required
Available options:
true
data
object
required