Skip to main content
Vaults

Create a Vault

Forward API reference.

Description

Creates a Vault and sets its metadata.

Path

POST /api/v1/forward/vaults

Request headers

HeaderRequiredDescription
AuthorizationYesBearer <PAT or SAT>
Idempotency-KeyNoOptional idempotency key for create requests. The same key can only be reused for the same request. If omitted, local idempotent replay protection is not provided.
Content-TypeYesapplication/json

Request body

FieldTypeRequiredDescription
display_namestringYesVault Display name.
metadataobjectNoMetadata object. created_by is reserved and must not be supplied (supplying it returns 400).

Example request

curl -X POST "https://api.qoder.com/api/v1/forward/vaults" \
  -H "Authorization: Bearer $QODER_ACCESS_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{
    "display_name": "mcp-vault",
    "metadata": {"source": "console"}
  }'

Example response

HTTP 201 Created
{
  "id": "vault_xxx",
  "type": "vault",
  "display_name": "mcp-vault",
  "metadata": {
    "source": "console"
  },
  "created_at": "2026-07-23T10:00:00Z",
  "updated_at": "2026-07-23T10:00:00Z",
  "identity_id": null
}

Response fields

FieldTypeDescription
idstringVault ID.
typestringAlways vault.
display_namestringVault Display name.
metadataobjectVault Metadata.
created_atstringCreation time in RFC 3339 format.
updated_atstringLast update time in RFC 3339 format.
identity_idstring/nullForward identity owner.

Errors

HTTPTypeTrigger
400invalid_request_errorThe request body, path parameters, or query parameters are invalid.
400invalid_request_errorIf the reserved key created_by is supplied, message is metadata key "created_by" is reserved, identifying the invalid field.
401authentication_errorThe authentication token is missing or invalid.
403permission_errorThe caller cannot access this resource.
409conflict_errorThe resource state, references, or idempotency key conflict.
500/502/503api_errorForward or a dependent service failed.