Secret Vault

MethodPathDescription
POST /v1/vault/secrets Create a named secret (encrypted at rest)
GET /v1/vault/secrets List secrets (values masked)
GET /v1/vault/secrets/{id} Get secret metadata (value masked)
PUT /v1/vault/secrets/{id} Update a secret value or metadata
DELETE /v1/vault/secrets/{id} Delete a secret
POST /v1/vault/secrets/{id}/rotate Rotate a secret with a new value