Create a vault

POST /api/v1/cloud/vaults Creates a new Vault. A Vault is used to securely store credentials for MCP servers. Add credentials with Create a credential after creating the Vault.

Headers

Header	Required	Description
`Authorization`	Yes	`Bearer $QODER_ACCESS_TOKEN`
`Content-Type`	Yes	`application/json`

Request body

Field	Type	Required	Description
`display_name`	string	Yes	Vault display name, maximum 255 characters
`metadata`	object	No	Custom metadata

Example request

curl -X POST https://api.qoder.com/api/v1/cloud/vaults \
  -H "Authorization: Bearer $QODER_ACCESS_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{
    "display_name": "my-mcp-vault",
    "metadata": {"team": "docs"}
  }'

Example response

HTTP 200 OK

{
  "id": "vault_019e3bb940277f0db05ab74291acf6ef",
  "type": "vault",
  "display_name": "my-mcp-vault",
  "metadata": {
    "team": "docs"
  },
  "credentials": [],
  "archived_at": null,
  "created_at": "2026-05-18T15:34:16.874877Z",
  "updated_at": "2026-05-18T15:34:16.874877Z"
}

Response fields

Field	Type	Description
`id`	string	Vault unique identifier with the `vault_` prefix
`type`	string	Always `"vault"`
`display_name`	string	Vault display name
`metadata`	object	Custom metadata
`credentials`	array	Always empty when creating a Vault; add credentials afterward with the create credential endpoint
`archived_at`	string \| null	Archive time, or `null` when active
`created_at`	string	Creation time (ISO 8601)
`updated_at`	string	Last update time (ISO 8601)

Errors

HTTP	Type	Trigger
400	`invalid_request_error`	Missing or invalid `display_name`, or invalid `metadata`
400	`invalid_request_error`	The request body contains the unsupported `credentials` field; the error message is `Field 'credentials' is not supported on vault create.`
401	`TOKEN_INVALID`	Missing or invalid authentication token

See Errors for the full error envelope.

Authenticate with vaults

Store and inject secrets safely into agent sessions.

​Headers

​Request body

​Example request

​Example response

​Response fields

​Errors

​Related