naftiko: 1.0.0-alpha2 info: label: HashiCorp Vault API — System description: 'HashiCorp Vault API — System. 149 operations. Lead operation: HashiCorp List the enabled audit devices.. Self-contained Naftiko capability covering one Hashicorp business surface.' tags: - Hashicorp - System created: '2026-05-19' modified: '2026-05-19' binds: - namespace: env keys: HASHICORP_API_KEY: HASHICORP_API_KEY capability: consumes: - type: http namespace: vault-system baseUri: '' description: HashiCorp Vault API — System business capability. Self-contained, no shared references. resources: - name: sys-audit path: /sys/audit operations: - name: getsysaudit method: GET description: HashiCorp List the enabled audit devices. outputRawFormat: json outputParameters: - name: result type: object value: $. - name: sys-audit-hash-path path: /sys/audit-hash/{path} operations: - name: postsysaudithashpath method: POST description: HashiCorp The hash of the given string via the given audit backend outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: body in: body type: object description: Request body (JSON). required: false - name: sys-audit-path path: /sys/audit/{path} operations: - name: postsysauditpath method: POST description: HashiCorp Enable a new audit device at the supplied path. outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: body in: body type: object description: Request body (JSON). required: false - name: deletesysauditpath method: DELETE description: HashiCorp Disable the audit device at the given path. outputRawFormat: json outputParameters: - name: result type: object value: $. - name: sys-auth path: /sys/auth operations: - name: getsysauth method: GET description: HashiCorp List the currently enabled credential backends. outputRawFormat: json outputParameters: - name: result type: object value: $. - name: sys-auth-path path: /sys/auth/{path} operations: - name: postsysauthpath method: POST description: HashiCorp Enables a new auth method. outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: body in: body type: object description: Request body (JSON). required: false - name: deletesysauthpath method: DELETE description: HashiCorp Disable the auth method at the given auth path outputRawFormat: json outputParameters: - name: result type: object value: $. - name: sys-auth-path-tune path: /sys/auth/{path}/tune operations: - name: getsysauthpathtune method: GET description: HashiCorp Reads the given auth path's configuration. outputRawFormat: json outputParameters: - name: result type: object value: $. - name: postsysauthpathtune method: POST description: HashiCorp Tune configuration parameters for a given auth path. outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: body in: body type: object description: Request body (JSON). required: false - name: sys-capabilities path: /sys/capabilities operations: - name: postsyscapabilities method: POST description: HashiCorp Fetches the capabilities of the given token on the given path. outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: body in: body type: object description: Request body (JSON). required: false - name: sys-capabilities-accessor path: /sys/capabilities-accessor operations: - name: postsyscapabilitiesaccessor method: POST description: HashiCorp Fetches the capabilities of the token associated with the given token, on the given path. outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: body in: body type: object description: Request body (JSON). required: false - name: sys-capabilities-self path: /sys/capabilities-self operations: - name: postsyscapabilitiesself method: POST description: HashiCorp Fetches the capabilities of the given token on the given path. outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: body in: body type: object description: Request body (JSON). required: false - name: sys-config-auditing-request-headers path: /sys/config/auditing/request-headers operations: - name: getsysconfigauditingrequestheaders method: GET description: HashiCorp List the request headers that are configured to be audited. outputRawFormat: json outputParameters: - name: result type: object value: $. - name: sys-config-auditing-request-headers-header path: /sys/config/auditing/request-headers/{header} operations: - name: getsysconfigauditingrequestheadersheader method: GET description: HashiCorp List the information for the given request header. outputRawFormat: json outputParameters: - name: result type: object value: $. - name: postsysconfigauditingrequestheadersheader method: POST description: HashiCorp Enable auditing of a header. outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: body in: body type: object description: Request body (JSON). required: false - name: deletesysconfigauditingrequestheadersheader method: DELETE description: HashiCorp Disable auditing of the given request header. outputRawFormat: json outputParameters: - name: result type: object value: $. - name: sys-config-cors path: /sys/config/cors operations: - name: getsysconfigcors method: GET description: HashiCorp Return the current CORS settings. outputRawFormat: json outputParameters: - name: result type: object value: $. - name: postsysconfigcors method: POST description: HashiCorp Configure the CORS settings. outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: body in: body type: object description: Request body (JSON). required: false - name: deletesysconfigcors method: DELETE description: HashiCorp Remove any CORS settings. outputRawFormat: json outputParameters: - name: result type: object value: $. - name: sys-config-reload-subsystem path: /sys/config/reload/{subsystem} operations: - name: postsysconfigreloadsubsystem method: POST description: HashiCorp Reload the given subsystem outputRawFormat: json outputParameters: - name: result type: object value: $. - name: sys-config-state-sanitized path: /sys/config/state/sanitized operations: - name: getsysconfigstatesanitized method: GET description: HashiCorp Return a sanitized version of the Vault server configuration. outputRawFormat: json outputParameters: - name: result type: object value: $. - name: sys-config-ui-headers path: /sys/config/ui/headers/ operations: - name: getsysconfiguiheaders method: GET description: HashiCorp Return a list of configured UI headers. outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: list in: query type: string description: Return a list if `true` - name: sys-config-ui-headers-header path: /sys/config/ui/headers/{header} operations: - name: getsysconfiguiheadersheader method: GET description: HashiCorp Return the given UI header's configuration outputRawFormat: json outputParameters: - name: result type: object value: $. - name: postsysconfiguiheadersheader method: POST description: HashiCorp Configure the values to be returned for the UI header. outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: body in: body type: object description: Request body (JSON). required: false - name: deletesysconfiguiheadersheader method: DELETE description: HashiCorp Remove a UI header. outputRawFormat: json outputParameters: - name: result type: object value: $. - name: sys-generate-root path: /sys/generate-root operations: - name: getsysgenerateroot method: GET description: HashiCorp Read the configuration and progress of the current root generation attempt. outputRawFormat: json outputParameters: - name: result type: object value: $. - name: postsysgenerateroot method: POST description: HashiCorp Initializes a new root generation attempt. outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: body in: body type: object description: Request body (JSON). required: false - name: deletesysgenerateroot method: DELETE description: HashiCorp Cancels any in-progress root generation attempt. outputRawFormat: json outputParameters: - name: result type: object value: $. - name: sys-generate-root-attempt path: /sys/generate-root/attempt operations: - name: getsysgeneraterootattempt method: GET description: HashiCorp Read the configuration and progress of the current root generation attempt. outputRawFormat: json outputParameters: - name: result type: object value: $. - name: postsysgeneraterootattempt method: POST description: HashiCorp Initializes a new root generation attempt. outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: body in: body type: object description: Request body (JSON). required: false - name: deletesysgeneraterootattempt method: DELETE description: HashiCorp Cancels any in-progress root generation attempt. outputRawFormat: json outputParameters: - name: result type: object value: $. - name: sys-generate-root-update path: /sys/generate-root/update operations: - name: postsysgeneraterootupdate method: POST description: HashiCorp Enter a single master key share to progress the root generation attempt. outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: body in: body type: object description: Request body (JSON). required: false - name: sys-health path: /sys/health operations: - name: getsyshealth method: GET description: HashiCorp Returns the health status of Vault. outputRawFormat: json outputParameters: - name: result type: object value: $. - name: sys-host-info path: /sys/host-info operations: - name: getsyshostinfo method: GET description: HashiCorp Information about the host instance that this Vault server is running on. outputRawFormat: json outputParameters: - name: result type: object value: $. - name: sys-init path: /sys/init operations: - name: getsysinit method: GET description: HashiCorp Returns the initialization status of Vault. outputRawFormat: json outputParameters: - name: result type: object value: $. - name: postsysinit method: POST description: HashiCorp Initialize a new Vault. outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: body in: body type: object description: Request body (JSON). required: false - name: sys-internal-counters-activity path: /sys/internal/counters/activity operations: - name: getsysinternalcountersactivity method: GET description: HashiCorp Report the client count metrics, for this namespace and all child namespaces. outputRawFormat: json outputParameters: - name: result type: object value: $. - name: sys-internal-counters-activity-monthly path: /sys/internal/counters/activity/monthly operations: - name: getsysinternalcountersactivitymonthly method: GET description: HashiCorp Report the number of clients for this month, for this namespace and all child namespaces. outputRawFormat: json outputParameters: - name: result type: object value: $. - name: sys-internal-counters-config path: /sys/internal/counters/config operations: - name: getsysinternalcountersconfig method: GET description: HashiCorp Read the client count tracking configuration. outputRawFormat: json outputParameters: - name: result type: object value: $. - name: postsysinternalcountersconfig method: POST description: HashiCorp Enable or disable collection of client count, set retention period, or set default reporting period. outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: body in: body type: object description: Request body (JSON). required: false - name: sys-internal-counters-entities path: /sys/internal/counters/entities operations: - name: getsysinternalcountersentities method: GET description: HashiCorp Backwards compatibility is not guaranteed for this API outputRawFormat: json outputParameters: - name: result type: object value: $. - name: sys-internal-counters-requests path: /sys/internal/counters/requests operations: - name: getsysinternalcountersrequests method: GET description: HashiCorp Backwards compatibility is not guaranteed for this API outputRawFormat: json outputParameters: - name: result type: object value: $. - name: sys-internal-counters-tokens path: /sys/internal/counters/tokens operations: - name: getsysinternalcounterstokens method: GET description: HashiCorp Backwards compatibility is not guaranteed for this API outputRawFormat: json outputParameters: - name: result type: object value: $. - name: sys-internal-specs-openapi path: /sys/internal/specs/openapi operations: - name: getsysinternalspecsopenapi method: GET description: HashiCorp Generate an OpenAPI 3 document of all mounted paths. outputRawFormat: json outputParameters: - name: result type: object value: $. - name: sys-internal-ui-feature-flags path: /sys/internal/ui/feature-flags operations: - name: getsysinternaluifeatureflags method: GET description: HashiCorp Lists enabled feature flags. outputRawFormat: json outputParameters: - name: result type: object value: $. - name: sys-internal-ui-mounts path: /sys/internal/ui/mounts operations: - name: getsysinternaluimounts method: GET description: HashiCorp Lists all enabled and visible auth and secrets mounts. outputRawFormat: json outputParameters: - name: result type: object value: $. - name: sys-internal-ui-mounts-path path: /sys/internal/ui/mounts/{path} operations: - name: getsysinternaluimountspath method: GET description: HashiCorp Return information about the given mount. outputRawFormat: json outputParameters: - name: result type: object value: $. - name: sys-internal-ui-namespaces path: /sys/internal/ui/namespaces operations: - name: getsysinternaluinamespaces method: GET description: HashiCorp Backwards compatibility is not guaranteed for this API outputRawFormat: json outputParameters: - name: result type: object value: $. - name: sys-internal-ui-resultant-acl path: /sys/internal/ui/resultant-acl operations: - name: getsysinternaluiresultantacl method: GET description: HashiCorp Backwards compatibility is not guaranteed for this API outputRawFormat: json outputParameters: - name: result type: object value: $. - name: sys-key-status path: /sys/key-status operations: - name: getsyskeystatus method: GET description: HashiCorp Provides information about the backend encryption key. outputRawFormat: json outputParameters: - name: result type: object value: $. - name: sys-leader path: /sys/leader operations: - name: getsysleader method: GET description: HashiCorp Returns the high availability status and current leader instance of Vault. outputRawFormat: json outputParameters: - name: result type: object value: $. - name: sys-leases path: /sys/leases operations: - name: getsysleases method: GET description: HashiCorp List leases associated with this Vault cluster outputRawFormat: json outputParameters: - name: result type: object value: $. - name: sys-leases-count path: /sys/leases/count operations: - name: getsysleasescount method: GET description: HashiCorp Count of leases associated with this Vault cluster outputRawFormat: json outputParameters: - name: result type: object value: $. - name: sys-leases-lookup path: /sys/leases/lookup operations: - name: postsysleaseslookup method: POST description: HashiCorp Retrieve lease metadata. outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: body in: body type: object description: Request body (JSON). required: false - name: sys-leases-lookup path: /sys/leases/lookup/ operations: - name: getsysleaseslookup method: GET description: HashiCorp Returns a list of lease ids. outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: list in: query type: string description: Return a list if `true` - name: sys-leases-lookup-prefix path: /sys/leases/lookup/{prefix} operations: - name: getsysleaseslookupprefix method: GET description: HashiCorp Returns a list of lease ids. outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: list in: query type: string description: Return a list if `true` - name: sys-leases-renew path: /sys/leases/renew operations: - name: postsysleasesrenew method: POST description: HashiCorp Renews a lease, requesting to extend the lease. outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: body in: body type: object description: Request body (JSON). required: false - name: sys-leases-renew-url_lease_id path: /sys/leases/renew/{url_lease_id} operations: - name: postsysleasesrenewurlleaseid method: POST description: HashiCorp Renews a lease, requesting to extend the lease. outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: body in: body type: object description: Request body (JSON). required: false - name: sys-leases-revoke path: /sys/leases/revoke operations: - name: postsysleasesrevoke method: POST description: HashiCorp Revokes a lease immediately. outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: body in: body type: object description: Request body (JSON). required: false - name: sys-leases-revoke-force-prefix path: /sys/leases/revoke-force/{prefix} operations: - name: postsysleasesrevokeforceprefix method: POST description: HashiCorp Revokes all secrets or tokens generated under a given prefix immediately outputRawFormat: json outputParameters: - name: result type: object value: $. - name: sys-leases-revoke-prefix-prefix path: /sys/leases/revoke-prefix/{prefix} operations: - name: postsysleasesrevokeprefixprefix method: POST description: HashiCorp Revokes all secrets (via a lease ID prefix) or tokens (via the tokens' path property) generated under a given prefix immediately. outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: body in: body type: object description: Request body (JSON). required: false - name: sys-leases-revoke-url_lease_id path: /sys/leases/revoke/{url_lease_id} operations: - name: postsysleasesrevokeurlleaseid method: POST description: HashiCorp Revokes a lease immediately. outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: body in: body type: object description: Request body (JSON). required: false - name: sys-leases-tidy path: /sys/leases/tidy operations: - name: postsysleasestidy method: POST description: HashiCorp This endpoint performs cleanup tasks that can be run if certain error outputRawFormat: json outputParameters: - name: result type: object value: $. - name: sys-metrics path: /sys/metrics operations: - name: getsysmetrics method: GET description: HashiCorp Export the metrics aggregated for telemetry purpose. outputRawFormat: json outputParameters: - name: result type: object value: $. - name: sys-monitor path: /sys/monitor operations: - name: getsysmonitor method: GET description: '' outputRawFormat: json outputParameters: - name: result type: object value: $. - name: sys-mounts path: /sys/mounts operations: - name: getsysmounts method: GET description: HashiCorp List the currently mounted backends. outputRawFormat: json outputParameters: - name: result type: object value: $. - name: sys-mounts-path path: /sys/mounts/{path} operations: - name: postsysmountspath method: POST description: HashiCorp Enable a new secrets engine at the given path. outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: body in: body type: object description: Request body (JSON). required: false - name: deletesysmountspath method: DELETE description: HashiCorp Disable the mount point specified at the given path. outputRawFormat: json outputParameters: - name: result type: object value: $. - name: sys-mounts-path-tune path: /sys/mounts/{path}/tune operations: - name: getsysmountspathtune method: GET description: HashiCorp Tune backend configuration parameters for this mount. outputRawFormat: json outputParameters: - name: result type: object value: $. - name: postsysmountspathtune method: POST description: HashiCorp Tune backend configuration parameters for this mount. outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: body in: body type: object description: Request body (JSON). required: false - name: sys-plugins-catalog path: /sys/plugins/catalog operations: - name: getsyspluginscatalog method: GET description: HashiCorp Lists all the plugins known to Vault outputRawFormat: json outputParameters: - name: result type: object value: $. - name: sys-plugins-catalog-name path: /sys/plugins/catalog/{name} operations: - name: getsyspluginscatalogname method: GET description: HashiCorp Return the configuration data for the plugin with the given name. outputRawFormat: json outputParameters: - name: result type: object value: $. - name: postsyspluginscatalogname method: POST description: HashiCorp Register a new plugin, or updates an existing one with the supplied name. outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: body in: body type: object description: Request body (JSON). required: false - name: deletesyspluginscatalogname method: DELETE description: HashiCorp Remove the plugin with the given name. outputRawFormat: json outputParameters: - name: result type: object value: $. - name: sys-plugins-catalog-type path: /sys/plugins/catalog/{type} operations: - name: getsyspluginscatalogtype method: GET description: HashiCorp List the plugins in the catalog. outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: list in: query type: string description: Return a list if `true` - name: sys-plugins-catalog-type-name path: /sys/plugins/catalog/{type}/{name} operations: - name: getsyspluginscatalogtypename method: GET description: HashiCorp Return the configuration data for the plugin with the given name. outputRawFormat: json outputParameters: - name: result type: object value: $. - name: postsyspluginscatalogtypename method: POST description: HashiCorp Register a new plugin, or updates an existing one with the supplied name. outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: body in: body type: object description: Request body (JSON). required: false - name: deletesyspluginscatalogtypename method: DELETE description: HashiCorp Remove the plugin with the given name. outputRawFormat: json outputParameters: - name: result type: object value: $. - name: sys-plugins-reload-backend path: /sys/plugins/reload/backend operations: - name: postsyspluginsreloadbackend method: POST description: HashiCorp Reload mounted plugin backends. outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: body in: body type: object description: Request body (JSON). required: false - name: sys-policies-acl path: /sys/policies/acl operations: - name: getsyspoliciesacl method: GET description: HashiCorp List the configured access control policies. outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: list in: query type: string description: Return a list if `true` - name: sys-policies-acl-name path: /sys/policies/acl/{name} operations: - name: getsyspoliciesaclname method: GET description: HashiCorp Retrieve information about the named ACL policy. outputRawFormat: json outputParameters: - name: result type: object value: $. - name: postsyspoliciesaclname method: POST description: HashiCorp Add a new or update an existing ACL policy. outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: body in: body type: object description: Request body (JSON). required: false - name: deletesyspoliciesaclname method: DELETE description: HashiCorp Delete the ACL policy with the given name. outputRawFormat: json outputParameters: - name: result type: object value: $. - name: sys-policies-password-name path: /sys/policies/password/{name} operations: - name: getsyspoliciespasswordname method: GET description: HashiCorp Retrieve an existing password policy. outputRawFormat: json outputParameters: - name: result type: object value: $. - name: postsyspoliciespasswordname method: POST description: HashiCorp Add a new or update an existing password policy. outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: body in: body type: object description: Request body (JSON). required: false - name: deletesyspoliciespasswordname method: DELETE description: HashiCorp Delete a password policy. outputRawFormat: json outputParameters: - name: result type: object value: $. - name: sys-policies-password-name-generate path: /sys/policies/password/{name}/generate operations: - name: getsyspoliciespasswordnamegenerate method: GET description: HashiCorp Generate a password from an existing password policy. outputRawFormat: json outputParameters: - name: result type: object value: $. - name: sys-policy path: /sys/policy operations: - name: getsyspolicy method: GET description: HashiCorp List the configured access control policies. outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: list in: query type: string description: Return a list if `true` - name: sys-policy-name path: /sys/policy/{name} operations: - name: getsyspolicyname method: GET description: HashiCorp Retrieve the policy body for the named policy. outputRawFormat: json outputParameters: - name: result type: object value: $. - name: postsyspolicyname method: POST description: HashiCorp Add a new or update an existing policy. outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: body in: body type: object description: Request body (JSON). required: false - name: deletesyspolicyname method: DELETE description: HashiCorp Delete the policy with the given name. outputRawFormat: json outputParameters: - name: result type: object value: $. - name: sys-pprof path: /sys/pprof/ operations: - name: getsyspprof method: GET description: HashiCorp Returns an HTML page listing the available profiles. outputRawFormat: json outputParameters: - name: result type: object value: $. - name: sys-pprof-allocs path: /sys/pprof/allocs operations: - name: getsyspprofallocs method: GET description: HashiCorp Returns a sampling of all past memory allocations. outputRawFormat: json outputParameters: - name: result type: object value: $. - name: sys-pprof-block path: /sys/pprof/block operations: - name: getsyspprofblock method: GET description: HashiCorp Returns stack traces that led to blocking on synchronization primitives outputRawFormat: json outputParameters: - name: result type: object value: $. - name: sys-pprof-cmdline path: /sys/pprof/cmdline operations: - name: getsyspprofcmdline method: GET description: HashiCorp Returns the running program's command line. outputRawFormat: json outputParameters: - name: result type: object value: $. - name: sys-pprof-goroutine path: /sys/pprof/goroutine operations: - name: getsyspprofgoroutine method: GET description: HashiCorp Returns stack traces of all current goroutines. outputRawFormat: json outputParameters: - name: result type: object value: $. - name: sys-pprof-heap path: /sys/pprof/heap operations: - name: getsyspprofheap method: GET description: HashiCorp Returns a sampling of memory allocations of live object. outputRawFormat: json outputParameters: - name: result type: object value: $. - name: sys-pprof-mutex path: /sys/pprof/mutex operations: - name: getsyspprofmutex method: GET description: HashiCorp Returns stack traces of holders of contended mutexes outputRawFormat: json outputParameters: - name: result type: object value: $. - name: sys-pprof-profile path: /sys/pprof/profile operations: - name: getsyspprofprofile method: GET description: HashiCorp Returns a pprof-formatted cpu profile payload. outputRawFormat: json outputParameters: - name: result type: object value: $. - name: sys-pprof-symbol path: /sys/pprof/symbol operations: - name: getsyspprofsymbol method: GET description: HashiCorp Returns the program counters listed in the request. outputRawFormat: json outputParameters: - name: result type: object value: $. - name: sys-pprof-threadcreate path: /sys/pprof/threadcreate operations: - name: getsyspprofthreadcreate method: GET description: HashiCorp Returns stack traces that led to the creation of new OS threads outputRawFormat: json outputParameters: - name: result type: object value: $. - name: sys-pprof-trace path: /sys/pprof/trace operations: - name: getsyspproftrace method: GET description: HashiCorp Returns the execution trace in binary form. outputRawFormat: json outputParameters: - name: result type: object value: $. - name: sys-quotas-config path: /sys/quotas/config operations: - name: getsysquotasconfig method: GET description: '' outputRawFormat: json outputParameters: - name: result type: object value: $. - name: postsysquotasconfig method: POST description: '' outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: body in: body type: object description: Request body (JSON). required: false - name: sys-quotas-rate-limit path: /sys/quotas/rate-limit operations: - name: getsysquotasratelimit method: GET description: '' outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: list in: query type: string description: Return a list if `true` - name: sys-quotas-rate-limit-name path: /sys/quotas/rate-limit/{name} operations: - name: getsysquotasratelimitname method: GET description: '' outputRawFormat: json outputParameters: - name: result type: object value: $. - name: postsysquotasratelimitname method: POST description: '' outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: body in: body type: object description: Request body (JSON). required: false - name: deletesysquotasratelimitname method: DELETE description: '' outputRawFormat: json outputParameters: - name: result type: object value: $. - name: sys-raw path: /sys/raw operations: - name: getsysraw method: GET description: HashiCorp Read the value of the key at the given path. outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: list in: query type: string description: Return a list if `true` - name: postsysraw method: POST description: HashiCorp Update the value of the key at the given path. outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: body in: body type: object description: Request body (JSON). required: false - name: deletesysraw method: DELETE description: HashiCorp Delete the key with given path. outputRawFormat: json outputParameters: - name: result type: object value: $. - name: sys-raw-path path: /sys/raw/{path} operations: - name: getsysrawpath method: GET description: HashiCorp Read the value of the key at the given path. outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: list in: query type: string description: Return a list if `true` - name: postsysrawpath method: POST description: HashiCorp Update the value of the key at the given path. outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: body in: body type: object description: Request body (JSON). required: false - name: deletesysrawpath method: DELETE description: HashiCorp Delete the key with given path. outputRawFormat: json outputParameters: - name: result type: object value: $. - name: sys-rekey-backup path: /sys/rekey/backup operations: - name: getsysrekeybackup method: GET description: HashiCorp Return the backup copy of PGP-encrypted unseal keys. outputRawFormat: json outputParameters: - name: result type: object value: $. - name: deletesysrekeybackup method: DELETE description: HashiCorp Delete the backup copy of PGP-encrypted unseal keys. outputRawFormat: json outputParameters: - name: result type: object value: $. - name: sys-rekey-init path: /sys/rekey/init operations: - name: getsysrekeyinit method: GET description: HashiCorp Reads the configuration and progress of the current rekey attempt. outputRawFormat: json outputParameters: - name: result type: object value: $. - name: postsysrekeyinit method: POST description: HashiCorp Initializes a new rekey attempt. outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: body in: body type: object description: Request body (JSON). required: false - name: deletesysrekeyinit method: DELETE description: HashiCorp Cancels any in-progress rekey. outputRawFormat: json outputParameters: - name: result type: object value: $. - name: sys-rekey-recovery-key-backup path: /sys/rekey/recovery-key-backup operations: - name: getsysrekeyrecoverykeybackup method: GET description: HashiCorp Allows fetching or deleting the backup of the rotated unseal keys. outputRawFormat: json outputParameters: - name: result type: object value: $. - name: deletesysrekeyrecoverykeybackup method: DELETE description: HashiCorp Allows fetching or deleting the backup of the rotated unseal keys. outputRawFormat: json outputParameters: - name: result type: object value: $. - name: sys-rekey-update path: /sys/rekey/update operations: - name: postsysrekeyupdate method: POST description: HashiCorp Enter a single master key share to progress the rekey of the Vault. outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: body in: body type: object description: Request body (JSON). required: false - name: sys-rekey-verify path: /sys/rekey/verify operations: - name: getsysrekeyverify method: GET description: HashiCorp Read the configuration and progress of the current rekey verification attempt. outputRawFormat: json outputParameters: - name: result type: object value: $. - name: postsysrekeyverify method: POST description: HashiCorp Enter a single new key share to progress the rekey verification operation. outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: body in: body type: object description: Request body (JSON). required: false - name: deletesysrekeyverify method: DELETE description: HashiCorp Cancel any in-progress rekey verification operation. outputRawFormat: json outputParameters: - name: result type: object value: $. - name: sys-remount path: /sys/remount operations: - name: postsysremount method: POST description: HashiCorp Move the mount point of an already-mounted backend. outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: body in: body type: object description: Request body (JSON). required: false - name: sys-renew path: /sys/renew operations: - name: postsysrenew method: POST description: HashiCorp Renews a lease, requesting to extend the lease. outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: body in: body type: object description: Request body (JSON). required: false - name: sys-renew-url_lease_id path: /sys/renew/{url_lease_id} operations: - name: postsysrenewurlleaseid method: POST description: HashiCorp Renews a lease, requesting to extend the lease. outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: body in: body type: object description: Request body (JSON). required: false - name: sys-replication-status path: /sys/replication/status operations: - name: getsysreplicationstatus method: GET description: '' outputRawFormat: json outputParameters: - name: result type: object value: $. - name: sys-revoke path: /sys/revoke operations: - name: postsysrevoke method: POST description: HashiCorp Revokes a lease immediately. outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: body in: body type: object description: Request body (JSON). required: false - name: sys-revoke-force-prefix path: /sys/revoke-force/{prefix} operations: - name: postsysrevokeforceprefix method: POST description: HashiCorp Revokes all secrets or tokens generated under a given prefix immediately outputRawFormat: json outputParameters: - name: result type: object value: $. - name: sys-revoke-prefix-prefix path: /sys/revoke-prefix/{prefix} operations: - name: postsysrevokeprefixprefix method: POST description: HashiCorp Revokes all secrets (via a lease ID prefix) or tokens (via the tokens' path property) generated under a given prefix immediately. outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: body in: body type: object description: Request body (JSON). required: false - name: sys-revoke-url_lease_id path: /sys/revoke/{url_lease_id} operations: - name: postsysrevokeurlleaseid method: POST description: HashiCorp Revokes a lease immediately. outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: body in: body type: object description: Request body (JSON). required: false - name: sys-rotate path: /sys/rotate operations: - name: postsysrotate method: POST description: HashiCorp Rotates the backend encryption key used to persist data. outputRawFormat: json outputParameters: - name: result type: object value: $. - name: sys-rotate-config path: /sys/rotate/config operations: - name: getsysrotateconfig method: GET description: '' outputRawFormat: json outputParameters: - name: result type: object value: $. - name: postsysrotateconfig method: POST description: '' outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: body in: body type: object description: Request body (JSON). required: false - name: sys-seal path: /sys/seal operations: - name: postsysseal method: POST description: HashiCorp Seal the Vault. outputRawFormat: json outputParameters: - name: result type: object value: $. - name: sys-seal-status path: /sys/seal-status operations: - name: getsyssealstatus method: GET description: HashiCorp Check the seal status of a Vault. outputRawFormat: json outputParameters: - name: result type: object value: $. - name: sys-step-down path: /sys/step-down operations: - name: postsysstepdown method: POST description: HashiCorp Cause the node to give up active status. outputRawFormat: json outputParameters: - name: result type: object value: $. - name: sys-tools-hash path: /sys/tools/hash operations: - name: postsystoolshash method: POST description: HashiCorp Generate a hash sum for input data outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: body in: body type: object description: Request body (JSON). required: false - name: sys-tools-hash-urlalgorithm path: /sys/tools/hash/{urlalgorithm} operations: - name: postsystoolshashurlalgorithm method: POST description: HashiCorp Generate a hash sum for input data outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: body in: body type: object description: Request body (JSON). required: false - name: sys-tools-random path: /sys/tools/random operations: - name: postsystoolsrandom method: POST description: HashiCorp Generate random bytes outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: body in: body type: object description: Request body (JSON). required: false - name: sys-tools-random-urlbytes path: /sys/tools/random/{urlbytes} operations: - name: postsystoolsrandomurlbytes method: POST description: HashiCorp Generate random bytes outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: body in: body type: object description: Request body (JSON). required: false - name: sys-unseal path: /sys/unseal operations: - name: postsysunseal method: POST description: HashiCorp Unseal the Vault. outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: body in: body type: object description: Request body (JSON). required: false - name: sys-wrapping-lookup path: /sys/wrapping/lookup operations: - name: getsyswrappinglookup method: GET description: HashiCorp Look up wrapping properties for the requester's token. outputRawFormat: json outputParameters: - name: result type: object value: $. - name: postsyswrappinglookup method: POST description: HashiCorp Look up wrapping properties for the given token. outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: body in: body type: object description: Request body (JSON). required: false - name: sys-wrapping-rewrap path: /sys/wrapping/rewrap operations: - name: postsyswrappingrewrap method: POST description: HashiCorp Rotates a response-wrapped token. outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: body in: body type: object description: Request body (JSON). required: false - name: sys-wrapping-unwrap path: /sys/wrapping/unwrap operations: - name: postsyswrappingunwrap method: POST description: HashiCorp Unwraps a response-wrapped token. outputRawFormat: json outputParameters: - name: result type: object value: $. inputParameters: - name: body in: body type: object description: Request body (JSON). required: false - name: sys-wrapping-wrap path: /sys/wrapping/wrap operations: - name: postsyswrappingwrap method: POST description: HashiCorp Response-wraps an arbitrary JSON object. outputRawFormat: json outputParameters: - name: result type: object value: $. exposes: - type: rest namespace: vault-system-rest port: 8080 description: REST adapter for HashiCorp Vault API — System. One Spectral-compliant resource per consumed operation, prefixed with /v1. resources: - path: /v1/sys/audit name: sys-audit description: REST surface for sys-audit. operations: - method: GET name: getsysaudit description: HashiCorp List the enabled audit devices. call: vault-system.getsysaudit outputParameters: - type: object mapping: $. - path: /v1/sys/audit-hash/{path} name: sys-audit-hash-path description: REST surface for sys-audit-hash-path. operations: - method: POST name: postsysaudithashpath description: HashiCorp The hash of the given string via the given audit backend call: vault-system.postsysaudithashpath with: body: rest.body outputParameters: - type: object mapping: $. - path: /v1/sys/audit/{path} name: sys-audit-path description: REST surface for sys-audit-path. operations: - method: POST name: postsysauditpath description: HashiCorp Enable a new audit device at the supplied path. call: vault-system.postsysauditpath with: body: rest.body outputParameters: - type: object mapping: $. - method: DELETE name: deletesysauditpath description: HashiCorp Disable the audit device at the given path. call: vault-system.deletesysauditpath outputParameters: - type: object mapping: $. - path: /v1/sys/auth name: sys-auth description: REST surface for sys-auth. operations: - method: GET name: getsysauth description: HashiCorp List the currently enabled credential backends. call: vault-system.getsysauth outputParameters: - type: object mapping: $. - path: /v1/sys/auth/{path} name: sys-auth-path description: REST surface for sys-auth-path. operations: - method: POST name: postsysauthpath description: HashiCorp Enables a new auth method. call: vault-system.postsysauthpath with: body: rest.body outputParameters: - type: object mapping: $. - method: DELETE name: deletesysauthpath description: HashiCorp Disable the auth method at the given auth path call: vault-system.deletesysauthpath outputParameters: - type: object mapping: $. - path: /v1/sys/auth/{path}/tune name: sys-auth-path-tune description: REST surface for sys-auth-path-tune. operations: - method: GET name: getsysauthpathtune description: HashiCorp Reads the given auth path's configuration. call: vault-system.getsysauthpathtune outputParameters: - type: object mapping: $. - method: POST name: postsysauthpathtune description: HashiCorp Tune configuration parameters for a given auth path. call: vault-system.postsysauthpathtune with: body: rest.body outputParameters: - type: object mapping: $. - path: /v1/sys/capabilities name: sys-capabilities description: REST surface for sys-capabilities. operations: - method: POST name: postsyscapabilities description: HashiCorp Fetches the capabilities of the given token on the given path. call: vault-system.postsyscapabilities with: body: rest.body outputParameters: - type: object mapping: $. - path: /v1/sys/capabilities-accessor name: sys-capabilities-accessor description: REST surface for sys-capabilities-accessor. operations: - method: POST name: postsyscapabilitiesaccessor description: HashiCorp Fetches the capabilities of the token associated with the given token, on the given path. call: vault-system.postsyscapabilitiesaccessor with: body: rest.body outputParameters: - type: object mapping: $. - path: /v1/sys/capabilities-self name: sys-capabilities-self description: REST surface for sys-capabilities-self. operations: - method: POST name: postsyscapabilitiesself description: HashiCorp Fetches the capabilities of the given token on the given path. call: vault-system.postsyscapabilitiesself with: body: rest.body outputParameters: - type: object mapping: $. - path: /v1/sys/config/auditing/request-headers name: sys-config-auditing-request-headers description: REST surface for sys-config-auditing-request-headers. operations: - method: GET name: getsysconfigauditingrequestheaders description: HashiCorp List the request headers that are configured to be audited. call: vault-system.getsysconfigauditingrequestheaders outputParameters: - type: object mapping: $. - path: /v1/sys/config/auditing/request-headers/{header} name: sys-config-auditing-request-headers-header description: REST surface for sys-config-auditing-request-headers-header. operations: - method: GET name: getsysconfigauditingrequestheadersheader description: HashiCorp List the information for the given request header. call: vault-system.getsysconfigauditingrequestheadersheader outputParameters: - type: object mapping: $. - method: POST name: postsysconfigauditingrequestheadersheader description: HashiCorp Enable auditing of a header. call: vault-system.postsysconfigauditingrequestheadersheader with: body: rest.body outputParameters: - type: object mapping: $. - method: DELETE name: deletesysconfigauditingrequestheadersheader description: HashiCorp Disable auditing of the given request header. call: vault-system.deletesysconfigauditingrequestheadersheader outputParameters: - type: object mapping: $. - path: /v1/sys/config/cors name: sys-config-cors description: REST surface for sys-config-cors. operations: - method: GET name: getsysconfigcors description: HashiCorp Return the current CORS settings. call: vault-system.getsysconfigcors outputParameters: - type: object mapping: $. - method: POST name: postsysconfigcors description: HashiCorp Configure the CORS settings. call: vault-system.postsysconfigcors with: body: rest.body outputParameters: - type: object mapping: $. - method: DELETE name: deletesysconfigcors description: HashiCorp Remove any CORS settings. call: vault-system.deletesysconfigcors outputParameters: - type: object mapping: $. - path: /v1/sys/config/reload/{subsystem} name: sys-config-reload-subsystem description: REST surface for sys-config-reload-subsystem. operations: - method: POST name: postsysconfigreloadsubsystem description: HashiCorp Reload the given subsystem call: vault-system.postsysconfigreloadsubsystem outputParameters: - type: object mapping: $. - path: /v1/sys/config/state/sanitized name: sys-config-state-sanitized description: REST surface for sys-config-state-sanitized. operations: - method: GET name: getsysconfigstatesanitized description: HashiCorp Return a sanitized version of the Vault server configuration. call: vault-system.getsysconfigstatesanitized outputParameters: - type: object mapping: $. - path: /v1/sys/config/ui/headers name: sys-config-ui-headers description: REST surface for sys-config-ui-headers. operations: - method: GET name: getsysconfiguiheaders description: HashiCorp Return a list of configured UI headers. call: vault-system.getsysconfiguiheaders with: list: rest.list outputParameters: - type: object mapping: $. - path: /v1/sys/config/ui/headers/{header} name: sys-config-ui-headers-header description: REST surface for sys-config-ui-headers-header. operations: - method: GET name: getsysconfiguiheadersheader description: HashiCorp Return the given UI header's configuration call: vault-system.getsysconfiguiheadersheader outputParameters: - type: object mapping: $. - method: POST name: postsysconfiguiheadersheader description: HashiCorp Configure the values to be returned for the UI header. call: vault-system.postsysconfiguiheadersheader with: body: rest.body outputParameters: - type: object mapping: $. - method: DELETE name: deletesysconfiguiheadersheader description: HashiCorp Remove a UI header. call: vault-system.deletesysconfiguiheadersheader outputParameters: - type: object mapping: $. - path: /v1/sys/generate-root name: sys-generate-root description: REST surface for sys-generate-root. operations: - method: GET name: getsysgenerateroot description: HashiCorp Read the configuration and progress of the current root generation attempt. call: vault-system.getsysgenerateroot outputParameters: - type: object mapping: $. - method: POST name: postsysgenerateroot description: HashiCorp Initializes a new root generation attempt. call: vault-system.postsysgenerateroot with: body: rest.body outputParameters: - type: object mapping: $. - method: DELETE name: deletesysgenerateroot description: HashiCorp Cancels any in-progress root generation attempt. call: vault-system.deletesysgenerateroot outputParameters: - type: object mapping: $. - path: /v1/sys/generate-root/attempt name: sys-generate-root-attempt description: REST surface for sys-generate-root-attempt. operations: - method: GET name: getsysgeneraterootattempt description: HashiCorp Read the configuration and progress of the current root generation attempt. call: vault-system.getsysgeneraterootattempt outputParameters: - type: object mapping: $. - method: POST name: postsysgeneraterootattempt description: HashiCorp Initializes a new root generation attempt. call: vault-system.postsysgeneraterootattempt with: body: rest.body outputParameters: - type: object mapping: $. - method: DELETE name: deletesysgeneraterootattempt description: HashiCorp Cancels any in-progress root generation attempt. call: vault-system.deletesysgeneraterootattempt outputParameters: - type: object mapping: $. - path: /v1/sys/generate-root/update name: sys-generate-root-update description: REST surface for sys-generate-root-update. operations: - method: POST name: postsysgeneraterootupdate description: HashiCorp Enter a single master key share to progress the root generation attempt. call: vault-system.postsysgeneraterootupdate with: body: rest.body outputParameters: - type: object mapping: $. - path: /v1/sys/health name: sys-health description: REST surface for sys-health. operations: - method: GET name: getsyshealth description: HashiCorp Returns the health status of Vault. call: vault-system.getsyshealth outputParameters: - type: object mapping: $. - path: /v1/sys/host-info name: sys-host-info description: REST surface for sys-host-info. operations: - method: GET name: getsyshostinfo description: HashiCorp Information about the host instance that this Vault server is running on. call: vault-system.getsyshostinfo outputParameters: - type: object mapping: $. - path: /v1/sys/init name: sys-init description: REST surface for sys-init. operations: - method: GET name: getsysinit description: HashiCorp Returns the initialization status of Vault. call: vault-system.getsysinit outputParameters: - type: object mapping: $. - method: POST name: postsysinit description: HashiCorp Initialize a new Vault. call: vault-system.postsysinit with: body: rest.body outputParameters: - type: object mapping: $. - path: /v1/sys/internal/counters/activity name: sys-internal-counters-activity description: REST surface for sys-internal-counters-activity. operations: - method: GET name: getsysinternalcountersactivity description: HashiCorp Report the client count metrics, for this namespace and all child namespaces. call: vault-system.getsysinternalcountersactivity outputParameters: - type: object mapping: $. - path: /v1/sys/internal/counters/activity/monthly name: sys-internal-counters-activity-monthly description: REST surface for sys-internal-counters-activity-monthly. operations: - method: GET name: getsysinternalcountersactivitymonthly description: HashiCorp Report the number of clients for this month, for this namespace and all child namespaces. call: vault-system.getsysinternalcountersactivitymonthly outputParameters: - type: object mapping: $. - path: /v1/sys/internal/counters/config name: sys-internal-counters-config description: REST surface for sys-internal-counters-config. operations: - method: GET name: getsysinternalcountersconfig description: HashiCorp Read the client count tracking configuration. call: vault-system.getsysinternalcountersconfig outputParameters: - type: object mapping: $. - method: POST name: postsysinternalcountersconfig description: HashiCorp Enable or disable collection of client count, set retention period, or set default reporting period. call: vault-system.postsysinternalcountersconfig with: body: rest.body outputParameters: - type: object mapping: $. - path: /v1/sys/internal/counters/entities name: sys-internal-counters-entities description: REST surface for sys-internal-counters-entities. operations: - method: GET name: getsysinternalcountersentities description: HashiCorp Backwards compatibility is not guaranteed for this API call: vault-system.getsysinternalcountersentities outputParameters: - type: object mapping: $. - path: /v1/sys/internal/counters/requests name: sys-internal-counters-requests description: REST surface for sys-internal-counters-requests. operations: - method: GET name: getsysinternalcountersrequests description: HashiCorp Backwards compatibility is not guaranteed for this API call: vault-system.getsysinternalcountersrequests outputParameters: - type: object mapping: $. - path: /v1/sys/internal/counters/tokens name: sys-internal-counters-tokens description: REST surface for sys-internal-counters-tokens. operations: - method: GET name: getsysinternalcounterstokens description: HashiCorp Backwards compatibility is not guaranteed for this API call: vault-system.getsysinternalcounterstokens outputParameters: - type: object mapping: $. - path: /v1/sys/internal/specs/openapi name: sys-internal-specs-openapi description: REST surface for sys-internal-specs-openapi. operations: - method: GET name: getsysinternalspecsopenapi description: HashiCorp Generate an OpenAPI 3 document of all mounted paths. call: vault-system.getsysinternalspecsopenapi outputParameters: - type: object mapping: $. - path: /v1/sys/internal/ui/feature-flags name: sys-internal-ui-feature-flags description: REST surface for sys-internal-ui-feature-flags. operations: - method: GET name: getsysinternaluifeatureflags description: HashiCorp Lists enabled feature flags. call: vault-system.getsysinternaluifeatureflags outputParameters: - type: object mapping: $. - path: /v1/sys/internal/ui/mounts name: sys-internal-ui-mounts description: REST surface for sys-internal-ui-mounts. operations: - method: GET name: getsysinternaluimounts description: HashiCorp Lists all enabled and visible auth and secrets mounts. call: vault-system.getsysinternaluimounts outputParameters: - type: object mapping: $. - path: /v1/sys/internal/ui/mounts/{path} name: sys-internal-ui-mounts-path description: REST surface for sys-internal-ui-mounts-path. operations: - method: GET name: getsysinternaluimountspath description: HashiCorp Return information about the given mount. call: vault-system.getsysinternaluimountspath outputParameters: - type: object mapping: $. - path: /v1/sys/internal/ui/namespaces name: sys-internal-ui-namespaces description: REST surface for sys-internal-ui-namespaces. operations: - method: GET name: getsysinternaluinamespaces description: HashiCorp Backwards compatibility is not guaranteed for this API call: vault-system.getsysinternaluinamespaces outputParameters: - type: object mapping: $. - path: /v1/sys/internal/ui/resultant-acl name: sys-internal-ui-resultant-acl description: REST surface for sys-internal-ui-resultant-acl. operations: - method: GET name: getsysinternaluiresultantacl description: HashiCorp Backwards compatibility is not guaranteed for this API call: vault-system.getsysinternaluiresultantacl outputParameters: - type: object mapping: $. - path: /v1/sys/key-status name: sys-key-status description: REST surface for sys-key-status. operations: - method: GET name: getsyskeystatus description: HashiCorp Provides information about the backend encryption key. call: vault-system.getsyskeystatus outputParameters: - type: object mapping: $. - path: /v1/sys/leader name: sys-leader description: REST surface for sys-leader. operations: - method: GET name: getsysleader description: HashiCorp Returns the high availability status and current leader instance of Vault. call: vault-system.getsysleader outputParameters: - type: object mapping: $. - path: /v1/sys/leases name: sys-leases description: REST surface for sys-leases. operations: - method: GET name: getsysleases description: HashiCorp List leases associated with this Vault cluster call: vault-system.getsysleases outputParameters: - type: object mapping: $. - path: /v1/sys/leases/count name: sys-leases-count description: REST surface for sys-leases-count. operations: - method: GET name: getsysleasescount description: HashiCorp Count of leases associated with this Vault cluster call: vault-system.getsysleasescount outputParameters: - type: object mapping: $. - path: /v1/sys/leases/lookup name: sys-leases-lookup description: REST surface for sys-leases-lookup. operations: - method: POST name: postsysleaseslookup description: HashiCorp Retrieve lease metadata. call: vault-system.postsysleaseslookup with: body: rest.body outputParameters: - type: object mapping: $. - path: /v1/sys/leases/lookup name: sys-leases-lookup description: REST surface for sys-leases-lookup. operations: - method: GET name: getsysleaseslookup description: HashiCorp Returns a list of lease ids. call: vault-system.getsysleaseslookup with: list: rest.list outputParameters: - type: object mapping: $. - path: /v1/sys/leases/lookup/{prefix} name: sys-leases-lookup-prefix description: REST surface for sys-leases-lookup-prefix. operations: - method: GET name: getsysleaseslookupprefix description: HashiCorp Returns a list of lease ids. call: vault-system.getsysleaseslookupprefix with: list: rest.list outputParameters: - type: object mapping: $. - path: /v1/sys/leases/renew name: sys-leases-renew description: REST surface for sys-leases-renew. operations: - method: POST name: postsysleasesrenew description: HashiCorp Renews a lease, requesting to extend the lease. call: vault-system.postsysleasesrenew with: body: rest.body outputParameters: - type: object mapping: $. - path: /v1/sys/leases/renew/{url-lease-id} name: sys-leases-renew-url-lease-id description: REST surface for sys-leases-renew-url_lease_id. operations: - method: POST name: postsysleasesrenewurlleaseid description: HashiCorp Renews a lease, requesting to extend the lease. call: vault-system.postsysleasesrenewurlleaseid with: body: rest.body outputParameters: - type: object mapping: $. - path: /v1/sys/leases/revoke name: sys-leases-revoke description: REST surface for sys-leases-revoke. operations: - method: POST name: postsysleasesrevoke description: HashiCorp Revokes a lease immediately. call: vault-system.postsysleasesrevoke with: body: rest.body outputParameters: - type: object mapping: $. - path: /v1/sys/leases/revoke-force/{prefix} name: sys-leases-revoke-force-prefix description: REST surface for sys-leases-revoke-force-prefix. operations: - method: POST name: postsysleasesrevokeforceprefix description: HashiCorp Revokes all secrets or tokens generated under a given prefix immediately call: vault-system.postsysleasesrevokeforceprefix outputParameters: - type: object mapping: $. - path: /v1/sys/leases/revoke-prefix/{prefix} name: sys-leases-revoke-prefix-prefix description: REST surface for sys-leases-revoke-prefix-prefix. operations: - method: POST name: postsysleasesrevokeprefixprefix description: HashiCorp Revokes all secrets (via a lease ID prefix) or tokens (via the tokens' path property) generated under a given prefix immediately. call: vault-system.postsysleasesrevokeprefixprefix with: body: rest.body outputParameters: - type: object mapping: $. - path: /v1/sys/leases/revoke/{url-lease-id} name: sys-leases-revoke-url-lease-id description: REST surface for sys-leases-revoke-url_lease_id. operations: - method: POST name: postsysleasesrevokeurlleaseid description: HashiCorp Revokes a lease immediately. call: vault-system.postsysleasesrevokeurlleaseid with: body: rest.body outputParameters: - type: object mapping: $. - path: /v1/sys/leases/tidy name: sys-leases-tidy description: REST surface for sys-leases-tidy. operations: - method: POST name: postsysleasestidy description: HashiCorp This endpoint performs cleanup tasks that can be run if certain error call: vault-system.postsysleasestidy outputParameters: - type: object mapping: $. - path: /v1/sys/metrics name: sys-metrics description: REST surface for sys-metrics. operations: - method: GET name: getsysmetrics description: HashiCorp Export the metrics aggregated for telemetry purpose. call: vault-system.getsysmetrics outputParameters: - type: object mapping: $. - path: /v1/sys/monitor name: sys-monitor description: REST surface for sys-monitor. operations: - method: GET name: getsysmonitor description: getsysmonitor call: vault-system.getsysmonitor outputParameters: - type: object mapping: $. - path: /v1/sys/mounts name: sys-mounts description: REST surface for sys-mounts. operations: - method: GET name: getsysmounts description: HashiCorp List the currently mounted backends. call: vault-system.getsysmounts outputParameters: - type: object mapping: $. - path: /v1/sys/mounts/{path} name: sys-mounts-path description: REST surface for sys-mounts-path. operations: - method: POST name: postsysmountspath description: HashiCorp Enable a new secrets engine at the given path. call: vault-system.postsysmountspath with: body: rest.body outputParameters: - type: object mapping: $. - method: DELETE name: deletesysmountspath description: HashiCorp Disable the mount point specified at the given path. call: vault-system.deletesysmountspath outputParameters: - type: object mapping: $. - path: /v1/sys/mounts/{path}/tune name: sys-mounts-path-tune description: REST surface for sys-mounts-path-tune. operations: - method: GET name: getsysmountspathtune description: HashiCorp Tune backend configuration parameters for this mount. call: vault-system.getsysmountspathtune outputParameters: - type: object mapping: $. - method: POST name: postsysmountspathtune description: HashiCorp Tune backend configuration parameters for this mount. call: vault-system.postsysmountspathtune with: body: rest.body outputParameters: - type: object mapping: $. - path: /v1/sys/plugins/catalog name: sys-plugins-catalog description: REST surface for sys-plugins-catalog. operations: - method: GET name: getsyspluginscatalog description: HashiCorp Lists all the plugins known to Vault call: vault-system.getsyspluginscatalog outputParameters: - type: object mapping: $. - path: /v1/sys/plugins/catalog/{name} name: sys-plugins-catalog-name description: REST surface for sys-plugins-catalog-name. operations: - method: GET name: getsyspluginscatalogname description: HashiCorp Return the configuration data for the plugin with the given name. call: vault-system.getsyspluginscatalogname outputParameters: - type: object mapping: $. - method: POST name: postsyspluginscatalogname description: HashiCorp Register a new plugin, or updates an existing one with the supplied name. call: vault-system.postsyspluginscatalogname with: body: rest.body outputParameters: - type: object mapping: $. - method: DELETE name: deletesyspluginscatalogname description: HashiCorp Remove the plugin with the given name. call: vault-system.deletesyspluginscatalogname outputParameters: - type: object mapping: $. - path: /v1/sys/plugins/catalog/{type} name: sys-plugins-catalog-type description: REST surface for sys-plugins-catalog-type. operations: - method: GET name: getsyspluginscatalogtype description: HashiCorp List the plugins in the catalog. call: vault-system.getsyspluginscatalogtype with: list: rest.list outputParameters: - type: object mapping: $. - path: /v1/sys/plugins/catalog/{type}/{name} name: sys-plugins-catalog-type-name description: REST surface for sys-plugins-catalog-type-name. operations: - method: GET name: getsyspluginscatalogtypename description: HashiCorp Return the configuration data for the plugin with the given name. call: vault-system.getsyspluginscatalogtypename outputParameters: - type: object mapping: $. - method: POST name: postsyspluginscatalogtypename description: HashiCorp Register a new plugin, or updates an existing one with the supplied name. call: vault-system.postsyspluginscatalogtypename with: body: rest.body outputParameters: - type: object mapping: $. - method: DELETE name: deletesyspluginscatalogtypename description: HashiCorp Remove the plugin with the given name. call: vault-system.deletesyspluginscatalogtypename outputParameters: - type: object mapping: $. - path: /v1/sys/plugins/reload/backend name: sys-plugins-reload-backend description: REST surface for sys-plugins-reload-backend. operations: - method: POST name: postsyspluginsreloadbackend description: HashiCorp Reload mounted plugin backends. call: vault-system.postsyspluginsreloadbackend with: body: rest.body outputParameters: - type: object mapping: $. - path: /v1/sys/policies/acl name: sys-policies-acl description: REST surface for sys-policies-acl. operations: - method: GET name: getsyspoliciesacl description: HashiCorp List the configured access control policies. call: vault-system.getsyspoliciesacl with: list: rest.list outputParameters: - type: object mapping: $. - path: /v1/sys/policies/acl/{name} name: sys-policies-acl-name description: REST surface for sys-policies-acl-name. operations: - method: GET name: getsyspoliciesaclname description: HashiCorp Retrieve information about the named ACL policy. call: vault-system.getsyspoliciesaclname outputParameters: - type: object mapping: $. - method: POST name: postsyspoliciesaclname description: HashiCorp Add a new or update an existing ACL policy. call: vault-system.postsyspoliciesaclname with: body: rest.body outputParameters: - type: object mapping: $. - method: DELETE name: deletesyspoliciesaclname description: HashiCorp Delete the ACL policy with the given name. call: vault-system.deletesyspoliciesaclname outputParameters: - type: object mapping: $. - path: /v1/sys/policies/password/{name} name: sys-policies-password-name description: REST surface for sys-policies-password-name. operations: - method: GET name: getsyspoliciespasswordname description: HashiCorp Retrieve an existing password policy. call: vault-system.getsyspoliciespasswordname outputParameters: - type: object mapping: $. - method: POST name: postsyspoliciespasswordname description: HashiCorp Add a new or update an existing password policy. call: vault-system.postsyspoliciespasswordname with: body: rest.body outputParameters: - type: object mapping: $. - method: DELETE name: deletesyspoliciespasswordname description: HashiCorp Delete a password policy. call: vault-system.deletesyspoliciespasswordname outputParameters: - type: object mapping: $. - path: /v1/sys/policies/password/{name}/generate name: sys-policies-password-name-generate description: REST surface for sys-policies-password-name-generate. operations: - method: GET name: getsyspoliciespasswordnamegenerate description: HashiCorp Generate a password from an existing password policy. call: vault-system.getsyspoliciespasswordnamegenerate outputParameters: - type: object mapping: $. - path: /v1/sys/policy name: sys-policy description: REST surface for sys-policy. operations: - method: GET name: getsyspolicy description: HashiCorp List the configured access control policies. call: vault-system.getsyspolicy with: list: rest.list outputParameters: - type: object mapping: $. - path: /v1/sys/policy/{name} name: sys-policy-name description: REST surface for sys-policy-name. operations: - method: GET name: getsyspolicyname description: HashiCorp Retrieve the policy body for the named policy. call: vault-system.getsyspolicyname outputParameters: - type: object mapping: $. - method: POST name: postsyspolicyname description: HashiCorp Add a new or update an existing policy. call: vault-system.postsyspolicyname with: body: rest.body outputParameters: - type: object mapping: $. - method: DELETE name: deletesyspolicyname description: HashiCorp Delete the policy with the given name. call: vault-system.deletesyspolicyname outputParameters: - type: object mapping: $. - path: /v1/sys/pprof name: sys-pprof description: REST surface for sys-pprof. operations: - method: GET name: getsyspprof description: HashiCorp Returns an HTML page listing the available profiles. call: vault-system.getsyspprof outputParameters: - type: object mapping: $. - path: /v1/sys/pprof/allocs name: sys-pprof-allocs description: REST surface for sys-pprof-allocs. operations: - method: GET name: getsyspprofallocs description: HashiCorp Returns a sampling of all past memory allocations. call: vault-system.getsyspprofallocs outputParameters: - type: object mapping: $. - path: /v1/sys/pprof/block name: sys-pprof-block description: REST surface for sys-pprof-block. operations: - method: GET name: getsyspprofblock description: HashiCorp Returns stack traces that led to blocking on synchronization primitives call: vault-system.getsyspprofblock outputParameters: - type: object mapping: $. - path: /v1/sys/pprof/cmdline name: sys-pprof-cmdline description: REST surface for sys-pprof-cmdline. operations: - method: GET name: getsyspprofcmdline description: HashiCorp Returns the running program's command line. call: vault-system.getsyspprofcmdline outputParameters: - type: object mapping: $. - path: /v1/sys/pprof/goroutine name: sys-pprof-goroutine description: REST surface for sys-pprof-goroutine. operations: - method: GET name: getsyspprofgoroutine description: HashiCorp Returns stack traces of all current goroutines. call: vault-system.getsyspprofgoroutine outputParameters: - type: object mapping: $. - path: /v1/sys/pprof/heap name: sys-pprof-heap description: REST surface for sys-pprof-heap. operations: - method: GET name: getsyspprofheap description: HashiCorp Returns a sampling of memory allocations of live object. call: vault-system.getsyspprofheap outputParameters: - type: object mapping: $. - path: /v1/sys/pprof/mutex name: sys-pprof-mutex description: REST surface for sys-pprof-mutex. operations: - method: GET name: getsyspprofmutex description: HashiCorp Returns stack traces of holders of contended mutexes call: vault-system.getsyspprofmutex outputParameters: - type: object mapping: $. - path: /v1/sys/pprof/profile name: sys-pprof-profile description: REST surface for sys-pprof-profile. operations: - method: GET name: getsyspprofprofile description: HashiCorp Returns a pprof-formatted cpu profile payload. call: vault-system.getsyspprofprofile outputParameters: - type: object mapping: $. - path: /v1/sys/pprof/symbol name: sys-pprof-symbol description: REST surface for sys-pprof-symbol. operations: - method: GET name: getsyspprofsymbol description: HashiCorp Returns the program counters listed in the request. call: vault-system.getsyspprofsymbol outputParameters: - type: object mapping: $. - path: /v1/sys/pprof/threadcreate name: sys-pprof-threadcreate description: REST surface for sys-pprof-threadcreate. operations: - method: GET name: getsyspprofthreadcreate description: HashiCorp Returns stack traces that led to the creation of new OS threads call: vault-system.getsyspprofthreadcreate outputParameters: - type: object mapping: $. - path: /v1/sys/pprof/trace name: sys-pprof-trace description: REST surface for sys-pprof-trace. operations: - method: GET name: getsyspproftrace description: HashiCorp Returns the execution trace in binary form. call: vault-system.getsyspproftrace outputParameters: - type: object mapping: $. - path: /v1/sys/quotas/config name: sys-quotas-config description: REST surface for sys-quotas-config. operations: - method: GET name: getsysquotasconfig description: getsysquotasconfig call: vault-system.getsysquotasconfig outputParameters: - type: object mapping: $. - method: POST name: postsysquotasconfig description: postsysquotasconfig call: vault-system.postsysquotasconfig with: body: rest.body outputParameters: - type: object mapping: $. - path: /v1/sys/quotas/rate-limit name: sys-quotas-rate-limit description: REST surface for sys-quotas-rate-limit. operations: - method: GET name: getsysquotasratelimit description: getsysquotasratelimit call: vault-system.getsysquotasratelimit with: list: rest.list outputParameters: - type: object mapping: $. - path: /v1/sys/quotas/rate-limit/{name} name: sys-quotas-rate-limit-name description: REST surface for sys-quotas-rate-limit-name. operations: - method: GET name: getsysquotasratelimitname description: getsysquotasratelimitname call: vault-system.getsysquotasratelimitname outputParameters: - type: object mapping: $. - method: POST name: postsysquotasratelimitname description: postsysquotasratelimitname call: vault-system.postsysquotasratelimitname with: body: rest.body outputParameters: - type: object mapping: $. - method: DELETE name: deletesysquotasratelimitname description: deletesysquotasratelimitname call: vault-system.deletesysquotasratelimitname outputParameters: - type: object mapping: $. - path: /v1/sys/raw name: sys-raw description: REST surface for sys-raw. operations: - method: GET name: getsysraw description: HashiCorp Read the value of the key at the given path. call: vault-system.getsysraw with: list: rest.list outputParameters: - type: object mapping: $. - method: POST name: postsysraw description: HashiCorp Update the value of the key at the given path. call: vault-system.postsysraw with: body: rest.body outputParameters: - type: object mapping: $. - method: DELETE name: deletesysraw description: HashiCorp Delete the key with given path. call: vault-system.deletesysraw outputParameters: - type: object mapping: $. - path: /v1/sys/raw/{path} name: sys-raw-path description: REST surface for sys-raw-path. operations: - method: GET name: getsysrawpath description: HashiCorp Read the value of the key at the given path. call: vault-system.getsysrawpath with: list: rest.list outputParameters: - type: object mapping: $. - method: POST name: postsysrawpath description: HashiCorp Update the value of the key at the given path. call: vault-system.postsysrawpath with: body: rest.body outputParameters: - type: object mapping: $. - method: DELETE name: deletesysrawpath description: HashiCorp Delete the key with given path. call: vault-system.deletesysrawpath outputParameters: - type: object mapping: $. - path: /v1/sys/rekey/backup name: sys-rekey-backup description: REST surface for sys-rekey-backup. operations: - method: GET name: getsysrekeybackup description: HashiCorp Return the backup copy of PGP-encrypted unseal keys. call: vault-system.getsysrekeybackup outputParameters: - type: object mapping: $. - method: DELETE name: deletesysrekeybackup description: HashiCorp Delete the backup copy of PGP-encrypted unseal keys. call: vault-system.deletesysrekeybackup outputParameters: - type: object mapping: $. - path: /v1/sys/rekey/init name: sys-rekey-init description: REST surface for sys-rekey-init. operations: - method: GET name: getsysrekeyinit description: HashiCorp Reads the configuration and progress of the current rekey attempt. call: vault-system.getsysrekeyinit outputParameters: - type: object mapping: $. - method: POST name: postsysrekeyinit description: HashiCorp Initializes a new rekey attempt. call: vault-system.postsysrekeyinit with: body: rest.body outputParameters: - type: object mapping: $. - method: DELETE name: deletesysrekeyinit description: HashiCorp Cancels any in-progress rekey. call: vault-system.deletesysrekeyinit outputParameters: - type: object mapping: $. - path: /v1/sys/rekey/recovery-key-backup name: sys-rekey-recovery-key-backup description: REST surface for sys-rekey-recovery-key-backup. operations: - method: GET name: getsysrekeyrecoverykeybackup description: HashiCorp Allows fetching or deleting the backup of the rotated unseal keys. call: vault-system.getsysrekeyrecoverykeybackup outputParameters: - type: object mapping: $. - method: DELETE name: deletesysrekeyrecoverykeybackup description: HashiCorp Allows fetching or deleting the backup of the rotated unseal keys. call: vault-system.deletesysrekeyrecoverykeybackup outputParameters: - type: object mapping: $. - path: /v1/sys/rekey/update name: sys-rekey-update description: REST surface for sys-rekey-update. operations: - method: POST name: postsysrekeyupdate description: HashiCorp Enter a single master key share to progress the rekey of the Vault. call: vault-system.postsysrekeyupdate with: body: rest.body outputParameters: - type: object mapping: $. - path: /v1/sys/rekey/verify name: sys-rekey-verify description: REST surface for sys-rekey-verify. operations: - method: GET name: getsysrekeyverify description: HashiCorp Read the configuration and progress of the current rekey verification attempt. call: vault-system.getsysrekeyverify outputParameters: - type: object mapping: $. - method: POST name: postsysrekeyverify description: HashiCorp Enter a single new key share to progress the rekey verification operation. call: vault-system.postsysrekeyverify with: body: rest.body outputParameters: - type: object mapping: $. - method: DELETE name: deletesysrekeyverify description: HashiCorp Cancel any in-progress rekey verification operation. call: vault-system.deletesysrekeyverify outputParameters: - type: object mapping: $. - path: /v1/sys/remount name: sys-remount description: REST surface for sys-remount. operations: - method: POST name: postsysremount description: HashiCorp Move the mount point of an already-mounted backend. call: vault-system.postsysremount with: body: rest.body outputParameters: - type: object mapping: $. - path: /v1/sys/renew name: sys-renew description: REST surface for sys-renew. operations: - method: POST name: postsysrenew description: HashiCorp Renews a lease, requesting to extend the lease. call: vault-system.postsysrenew with: body: rest.body outputParameters: - type: object mapping: $. - path: /v1/sys/renew/{url-lease-id} name: sys-renew-url-lease-id description: REST surface for sys-renew-url_lease_id. operations: - method: POST name: postsysrenewurlleaseid description: HashiCorp Renews a lease, requesting to extend the lease. call: vault-system.postsysrenewurlleaseid with: body: rest.body outputParameters: - type: object mapping: $. - path: /v1/sys/replication/status name: sys-replication-status description: REST surface for sys-replication-status. operations: - method: GET name: getsysreplicationstatus description: getsysreplicationstatus call: vault-system.getsysreplicationstatus outputParameters: - type: object mapping: $. - path: /v1/sys/revoke name: sys-revoke description: REST surface for sys-revoke. operations: - method: POST name: postsysrevoke description: HashiCorp Revokes a lease immediately. call: vault-system.postsysrevoke with: body: rest.body outputParameters: - type: object mapping: $. - path: /v1/sys/revoke-force/{prefix} name: sys-revoke-force-prefix description: REST surface for sys-revoke-force-prefix. operations: - method: POST name: postsysrevokeforceprefix description: HashiCorp Revokes all secrets or tokens generated under a given prefix immediately call: vault-system.postsysrevokeforceprefix outputParameters: - type: object mapping: $. - path: /v1/sys/revoke-prefix/{prefix} name: sys-revoke-prefix-prefix description: REST surface for sys-revoke-prefix-prefix. operations: - method: POST name: postsysrevokeprefixprefix description: HashiCorp Revokes all secrets (via a lease ID prefix) or tokens (via the tokens' path property) generated under a given prefix immediately. call: vault-system.postsysrevokeprefixprefix with: body: rest.body outputParameters: - type: object mapping: $. - path: /v1/sys/revoke/{url-lease-id} name: sys-revoke-url-lease-id description: REST surface for sys-revoke-url_lease_id. operations: - method: POST name: postsysrevokeurlleaseid description: HashiCorp Revokes a lease immediately. call: vault-system.postsysrevokeurlleaseid with: body: rest.body outputParameters: - type: object mapping: $. - path: /v1/sys/rotate name: sys-rotate description: REST surface for sys-rotate. operations: - method: POST name: postsysrotate description: HashiCorp Rotates the backend encryption key used to persist data. call: vault-system.postsysrotate outputParameters: - type: object mapping: $. - path: /v1/sys/rotate/config name: sys-rotate-config description: REST surface for sys-rotate-config. operations: - method: GET name: getsysrotateconfig description: getsysrotateconfig call: vault-system.getsysrotateconfig outputParameters: - type: object mapping: $. - method: POST name: postsysrotateconfig description: postsysrotateconfig call: vault-system.postsysrotateconfig with: body: rest.body outputParameters: - type: object mapping: $. - path: /v1/sys/seal name: sys-seal description: REST surface for sys-seal. operations: - method: POST name: postsysseal description: HashiCorp Seal the Vault. call: vault-system.postsysseal outputParameters: - type: object mapping: $. - path: /v1/sys/seal-status name: sys-seal-status description: REST surface for sys-seal-status. operations: - method: GET name: getsyssealstatus description: HashiCorp Check the seal status of a Vault. call: vault-system.getsyssealstatus outputParameters: - type: object mapping: $. - path: /v1/sys/step-down name: sys-step-down description: REST surface for sys-step-down. operations: - method: POST name: postsysstepdown description: HashiCorp Cause the node to give up active status. call: vault-system.postsysstepdown outputParameters: - type: object mapping: $. - path: /v1/sys/tools/hash name: sys-tools-hash description: REST surface for sys-tools-hash. operations: - method: POST name: postsystoolshash description: HashiCorp Generate a hash sum for input data call: vault-system.postsystoolshash with: body: rest.body outputParameters: - type: object mapping: $. - path: /v1/sys/tools/hash/{urlalgorithm} name: sys-tools-hash-urlalgorithm description: REST surface for sys-tools-hash-urlalgorithm. operations: - method: POST name: postsystoolshashurlalgorithm description: HashiCorp Generate a hash sum for input data call: vault-system.postsystoolshashurlalgorithm with: body: rest.body outputParameters: - type: object mapping: $. - path: /v1/sys/tools/random name: sys-tools-random description: REST surface for sys-tools-random. operations: - method: POST name: postsystoolsrandom description: HashiCorp Generate random bytes call: vault-system.postsystoolsrandom with: body: rest.body outputParameters: - type: object mapping: $. - path: /v1/sys/tools/random/{urlbytes} name: sys-tools-random-urlbytes description: REST surface for sys-tools-random-urlbytes. operations: - method: POST name: postsystoolsrandomurlbytes description: HashiCorp Generate random bytes call: vault-system.postsystoolsrandomurlbytes with: body: rest.body outputParameters: - type: object mapping: $. - path: /v1/sys/unseal name: sys-unseal description: REST surface for sys-unseal. operations: - method: POST name: postsysunseal description: HashiCorp Unseal the Vault. call: vault-system.postsysunseal with: body: rest.body outputParameters: - type: object mapping: $. - path: /v1/sys/wrapping/lookup name: sys-wrapping-lookup description: REST surface for sys-wrapping-lookup. operations: - method: GET name: getsyswrappinglookup description: HashiCorp Look up wrapping properties for the requester's token. call: vault-system.getsyswrappinglookup outputParameters: - type: object mapping: $. - method: POST name: postsyswrappinglookup description: HashiCorp Look up wrapping properties for the given token. call: vault-system.postsyswrappinglookup with: body: rest.body outputParameters: - type: object mapping: $. - path: /v1/sys/wrapping/rewrap name: sys-wrapping-rewrap description: REST surface for sys-wrapping-rewrap. operations: - method: POST name: postsyswrappingrewrap description: HashiCorp Rotates a response-wrapped token. call: vault-system.postsyswrappingrewrap with: body: rest.body outputParameters: - type: object mapping: $. - path: /v1/sys/wrapping/unwrap name: sys-wrapping-unwrap description: REST surface for sys-wrapping-unwrap. operations: - method: POST name: postsyswrappingunwrap description: HashiCorp Unwraps a response-wrapped token. call: vault-system.postsyswrappingunwrap with: body: rest.body outputParameters: - type: object mapping: $. - path: /v1/sys/wrapping/wrap name: sys-wrapping-wrap description: REST surface for sys-wrapping-wrap. operations: - method: POST name: postsyswrappingwrap description: HashiCorp Response-wraps an arbitrary JSON object. call: vault-system.postsyswrappingwrap outputParameters: - type: object mapping: $. - type: mcp namespace: vault-system-mcp port: 9090 transport: http description: MCP adapter for HashiCorp Vault API — System. One tool per consumed operation, routed inline through this capability's consumes block. tools: - name: hashicorp-list-enabled-audit-devices description: HashiCorp List the enabled audit devices. hints: readOnly: true destructive: false idempotent: true call: vault-system.getsysaudit outputParameters: - type: object mapping: $. - name: hashicorp-hash-given-string-given description: HashiCorp The hash of the given string via the given audit backend hints: readOnly: false destructive: false idempotent: false call: vault-system.postsysaudithashpath with: body: tools.body outputParameters: - type: object mapping: $. - name: hashicorp-enable-new-audit-device description: HashiCorp Enable a new audit device at the supplied path. hints: readOnly: false destructive: false idempotent: false call: vault-system.postsysauditpath with: body: tools.body outputParameters: - type: object mapping: $. - name: hashicorp-disable-audit-device-given description: HashiCorp Disable the audit device at the given path. hints: readOnly: false destructive: true idempotent: true call: vault-system.deletesysauditpath outputParameters: - type: object mapping: $. - name: hashicorp-list-currently-enabled-credential description: HashiCorp List the currently enabled credential backends. hints: readOnly: true destructive: false idempotent: true call: vault-system.getsysauth outputParameters: - type: object mapping: $. - name: hashicorp-enables-new-auth-method description: HashiCorp Enables a new auth method. hints: readOnly: false destructive: false idempotent: false call: vault-system.postsysauthpath with: body: tools.body outputParameters: - type: object mapping: $. - name: hashicorp-disable-auth-method-given description: HashiCorp Disable the auth method at the given auth path hints: readOnly: false destructive: true idempotent: true call: vault-system.deletesysauthpath outputParameters: - type: object mapping: $. - name: hashicorp-reads-given-auth-path-s description: HashiCorp Reads the given auth path's configuration. hints: readOnly: true destructive: false idempotent: true call: vault-system.getsysauthpathtune outputParameters: - type: object mapping: $. - name: hashicorp-tune-configuration-parameters-given description: HashiCorp Tune configuration parameters for a given auth path. hints: readOnly: false destructive: false idempotent: false call: vault-system.postsysauthpathtune with: body: tools.body outputParameters: - type: object mapping: $. - name: hashicorp-fetches-capabilities-given-token description: HashiCorp Fetches the capabilities of the given token on the given path. hints: readOnly: true destructive: false idempotent: false call: vault-system.postsyscapabilities with: body: tools.body outputParameters: - type: object mapping: $. - name: hashicorp-fetches-capabilities-token-associated description: HashiCorp Fetches the capabilities of the token associated with the given token, on the given path. hints: readOnly: true destructive: false idempotent: false call: vault-system.postsyscapabilitiesaccessor with: body: tools.body outputParameters: - type: object mapping: $. - name: hashicorp-fetches-capabilities-given-token-2 description: HashiCorp Fetches the capabilities of the given token on the given path. hints: readOnly: true destructive: false idempotent: false call: vault-system.postsyscapabilitiesself with: body: tools.body outputParameters: - type: object mapping: $. - name: hashicorp-list-request-headers-that description: HashiCorp List the request headers that are configured to be audited. hints: readOnly: true destructive: false idempotent: true call: vault-system.getsysconfigauditingrequestheaders outputParameters: - type: object mapping: $. - name: hashicorp-list-information-given-request description: HashiCorp List the information for the given request header. hints: readOnly: true destructive: false idempotent: true call: vault-system.getsysconfigauditingrequestheadersheader outputParameters: - type: object mapping: $. - name: hashicorp-enable-auditing-header description: HashiCorp Enable auditing of a header. hints: readOnly: false destructive: false idempotent: false call: vault-system.postsysconfigauditingrequestheadersheader with: body: tools.body outputParameters: - type: object mapping: $. - name: hashicorp-disable-auditing-given-request description: HashiCorp Disable auditing of the given request header. hints: readOnly: false destructive: true idempotent: true call: vault-system.deletesysconfigauditingrequestheadersheader outputParameters: - type: object mapping: $. - name: hashicorp-return-current-cors-settings description: HashiCorp Return the current CORS settings. hints: readOnly: true destructive: false idempotent: true call: vault-system.getsysconfigcors outputParameters: - type: object mapping: $. - name: hashicorp-configure-cors-settings description: HashiCorp Configure the CORS settings. hints: readOnly: false destructive: false idempotent: false call: vault-system.postsysconfigcors with: body: tools.body outputParameters: - type: object mapping: $. - name: hashicorp-remove-any-cors-settings description: HashiCorp Remove any CORS settings. hints: readOnly: false destructive: true idempotent: true call: vault-system.deletesysconfigcors outputParameters: - type: object mapping: $. - name: hashicorp-reload-given-subsystem description: HashiCorp Reload the given subsystem hints: readOnly: false destructive: false idempotent: false call: vault-system.postsysconfigreloadsubsystem outputParameters: - type: object mapping: $. - name: hashicorp-return-sanitized-version-vault description: HashiCorp Return a sanitized version of the Vault server configuration. hints: readOnly: true destructive: false idempotent: true call: vault-system.getsysconfigstatesanitized outputParameters: - type: object mapping: $. - name: hashicorp-return-list-configured-ui description: HashiCorp Return a list of configured UI headers. hints: readOnly: true destructive: false idempotent: true call: vault-system.getsysconfiguiheaders with: list: tools.list outputParameters: - type: object mapping: $. - name: hashicorp-return-given-ui-header-s description: HashiCorp Return the given UI header's configuration hints: readOnly: true destructive: false idempotent: true call: vault-system.getsysconfiguiheadersheader outputParameters: - type: object mapping: $. - name: hashicorp-configure-values-be-returned description: HashiCorp Configure the values to be returned for the UI header. hints: readOnly: false destructive: false idempotent: false call: vault-system.postsysconfiguiheadersheader with: body: tools.body outputParameters: - type: object mapping: $. - name: hashicorp-remove-ui-header description: HashiCorp Remove a UI header. hints: readOnly: false destructive: true idempotent: true call: vault-system.deletesysconfiguiheadersheader outputParameters: - type: object mapping: $. - name: hashicorp-read-configuration-and-progress description: HashiCorp Read the configuration and progress of the current root generation attempt. hints: readOnly: true destructive: false idempotent: true call: vault-system.getsysgenerateroot outputParameters: - type: object mapping: $. - name: hashicorp-initializes-new-root-generation description: HashiCorp Initializes a new root generation attempt. hints: readOnly: false destructive: false idempotent: false call: vault-system.postsysgenerateroot with: body: tools.body outputParameters: - type: object mapping: $. - name: hashicorp-cancels-any-progress-root description: HashiCorp Cancels any in-progress root generation attempt. hints: readOnly: false destructive: true idempotent: true call: vault-system.deletesysgenerateroot outputParameters: - type: object mapping: $. - name: hashicorp-read-configuration-and-progress-2 description: HashiCorp Read the configuration and progress of the current root generation attempt. hints: readOnly: true destructive: false idempotent: true call: vault-system.getsysgeneraterootattempt outputParameters: - type: object mapping: $. - name: hashicorp-initializes-new-root-generation-2 description: HashiCorp Initializes a new root generation attempt. hints: readOnly: false destructive: false idempotent: false call: vault-system.postsysgeneraterootattempt with: body: tools.body outputParameters: - type: object mapping: $. - name: hashicorp-cancels-any-progress-root-2 description: HashiCorp Cancels any in-progress root generation attempt. hints: readOnly: false destructive: true idempotent: true call: vault-system.deletesysgeneraterootattempt outputParameters: - type: object mapping: $. - name: hashicorp-enter-single-master-key description: HashiCorp Enter a single master key share to progress the root generation attempt. hints: readOnly: false destructive: false idempotent: false call: vault-system.postsysgeneraterootupdate with: body: tools.body outputParameters: - type: object mapping: $. - name: hashicorp-returns-health-status-vault description: HashiCorp Returns the health status of Vault. hints: readOnly: true destructive: false idempotent: true call: vault-system.getsyshealth outputParameters: - type: object mapping: $. - name: hashicorp-information-about-host-instance description: HashiCorp Information about the host instance that this Vault server is running on. hints: readOnly: true destructive: false idempotent: true call: vault-system.getsyshostinfo outputParameters: - type: object mapping: $. - name: hashicorp-returns-initialization-status-vault description: HashiCorp Returns the initialization status of Vault. hints: readOnly: true destructive: false idempotent: true call: vault-system.getsysinit outputParameters: - type: object mapping: $. - name: hashicorp-initialize-new-vault description: HashiCorp Initialize a new Vault. hints: readOnly: false destructive: false idempotent: false call: vault-system.postsysinit with: body: tools.body outputParameters: - type: object mapping: $. - name: hashicorp-report-client-count-metrics description: HashiCorp Report the client count metrics, for this namespace and all child namespaces. hints: readOnly: true destructive: false idempotent: true call: vault-system.getsysinternalcountersactivity outputParameters: - type: object mapping: $. - name: hashicorp-report-number-clients-this description: HashiCorp Report the number of clients for this month, for this namespace and all child namespaces. hints: readOnly: true destructive: false idempotent: true call: vault-system.getsysinternalcountersactivitymonthly outputParameters: - type: object mapping: $. - name: hashicorp-read-client-count-tracking description: HashiCorp Read the client count tracking configuration. hints: readOnly: true destructive: false idempotent: true call: vault-system.getsysinternalcountersconfig outputParameters: - type: object mapping: $. - name: hashicorp-enable-disable-collection-client description: HashiCorp Enable or disable collection of client count, set retention period, or set default reporting period. hints: readOnly: false destructive: false idempotent: false call: vault-system.postsysinternalcountersconfig with: body: tools.body outputParameters: - type: object mapping: $. - name: hashicorp-backwards-compatibility-is-not description: HashiCorp Backwards compatibility is not guaranteed for this API hints: readOnly: true destructive: false idempotent: true call: vault-system.getsysinternalcountersentities outputParameters: - type: object mapping: $. - name: hashicorp-backwards-compatibility-is-not-2 description: HashiCorp Backwards compatibility is not guaranteed for this API hints: readOnly: true destructive: false idempotent: true call: vault-system.getsysinternalcountersrequests outputParameters: - type: object mapping: $. - name: hashicorp-backwards-compatibility-is-not-3 description: HashiCorp Backwards compatibility is not guaranteed for this API hints: readOnly: true destructive: false idempotent: true call: vault-system.getsysinternalcounterstokens outputParameters: - type: object mapping: $. - name: hashicorp-generate-openapi-3-document description: HashiCorp Generate an OpenAPI 3 document of all mounted paths. hints: readOnly: true destructive: false idempotent: true call: vault-system.getsysinternalspecsopenapi outputParameters: - type: object mapping: $. - name: hashicorp-lists-enabled-feature-flags description: HashiCorp Lists enabled feature flags. hints: readOnly: true destructive: false idempotent: true call: vault-system.getsysinternaluifeatureflags outputParameters: - type: object mapping: $. - name: hashicorp-lists-all-enabled-and description: HashiCorp Lists all enabled and visible auth and secrets mounts. hints: readOnly: true destructive: false idempotent: true call: vault-system.getsysinternaluimounts outputParameters: - type: object mapping: $. - name: hashicorp-return-information-about-given description: HashiCorp Return information about the given mount. hints: readOnly: true destructive: false idempotent: true call: vault-system.getsysinternaluimountspath outputParameters: - type: object mapping: $. - name: hashicorp-backwards-compatibility-is-not-4 description: HashiCorp Backwards compatibility is not guaranteed for this API hints: readOnly: true destructive: false idempotent: true call: vault-system.getsysinternaluinamespaces outputParameters: - type: object mapping: $. - name: hashicorp-backwards-compatibility-is-not-5 description: HashiCorp Backwards compatibility is not guaranteed for this API hints: readOnly: true destructive: false idempotent: true call: vault-system.getsysinternaluiresultantacl outputParameters: - type: object mapping: $. - name: hashicorp-provides-information-about-backend description: HashiCorp Provides information about the backend encryption key. hints: readOnly: true destructive: false idempotent: true call: vault-system.getsyskeystatus outputParameters: - type: object mapping: $. - name: hashicorp-returns-high-availability-status description: HashiCorp Returns the high availability status and current leader instance of Vault. hints: readOnly: true destructive: false idempotent: true call: vault-system.getsysleader outputParameters: - type: object mapping: $. - name: hashicorp-list-leases-associated-this description: HashiCorp List leases associated with this Vault cluster hints: readOnly: true destructive: false idempotent: true call: vault-system.getsysleases outputParameters: - type: object mapping: $. - name: hashicorp-count-leases-associated-this description: HashiCorp Count of leases associated with this Vault cluster hints: readOnly: true destructive: false idempotent: true call: vault-system.getsysleasescount outputParameters: - type: object mapping: $. - name: hashicorp-retrieve-lease-metadata description: HashiCorp Retrieve lease metadata. hints: readOnly: true destructive: false idempotent: false call: vault-system.postsysleaseslookup with: body: tools.body outputParameters: - type: object mapping: $. - name: hashicorp-returns-list-lease-ids description: HashiCorp Returns a list of lease ids. hints: readOnly: true destructive: false idempotent: true call: vault-system.getsysleaseslookup with: list: tools.list outputParameters: - type: object mapping: $. - name: hashicorp-returns-list-lease-ids-2 description: HashiCorp Returns a list of lease ids. hints: readOnly: true destructive: false idempotent: true call: vault-system.getsysleaseslookupprefix with: list: tools.list outputParameters: - type: object mapping: $. - name: hashicorp-renews-lease-requesting-extend description: HashiCorp Renews a lease, requesting to extend the lease. hints: readOnly: false destructive: false idempotent: false call: vault-system.postsysleasesrenew with: body: tools.body outputParameters: - type: object mapping: $. - name: hashicorp-renews-lease-requesting-extend-2 description: HashiCorp Renews a lease, requesting to extend the lease. hints: readOnly: false destructive: false idempotent: false call: vault-system.postsysleasesrenewurlleaseid with: body: tools.body outputParameters: - type: object mapping: $. - name: hashicorp-revokes-lease-immediately description: HashiCorp Revokes a lease immediately. hints: readOnly: false destructive: false idempotent: false call: vault-system.postsysleasesrevoke with: body: tools.body outputParameters: - type: object mapping: $. - name: hashicorp-revokes-all-secrets-tokens description: HashiCorp Revokes all secrets or tokens generated under a given prefix immediately hints: readOnly: false destructive: false idempotent: false call: vault-system.postsysleasesrevokeforceprefix outputParameters: - type: object mapping: $. - name: hashicorp-revokes-all-secrets-lease description: HashiCorp Revokes all secrets (via a lease ID prefix) or tokens (via the tokens' path property) generated under a given prefix immediately. hints: readOnly: false destructive: false idempotent: false call: vault-system.postsysleasesrevokeprefixprefix with: body: tools.body outputParameters: - type: object mapping: $. - name: hashicorp-revokes-lease-immediately-2 description: HashiCorp Revokes a lease immediately. hints: readOnly: false destructive: false idempotent: false call: vault-system.postsysleasesrevokeurlleaseid with: body: tools.body outputParameters: - type: object mapping: $. - name: hashicorp-this-endpoint-performs-cleanup description: HashiCorp This endpoint performs cleanup tasks that can be run if certain error hints: readOnly: false destructive: false idempotent: false call: vault-system.postsysleasestidy outputParameters: - type: object mapping: $. - name: hashicorp-export-metrics-aggregated-telemetry description: HashiCorp Export the metrics aggregated for telemetry purpose. hints: readOnly: true destructive: false idempotent: true call: vault-system.getsysmetrics outputParameters: - type: object mapping: $. - name: getsysmonitor description: getsysmonitor hints: readOnly: true destructive: false idempotent: true call: vault-system.getsysmonitor outputParameters: - type: object mapping: $. - name: hashicorp-list-currently-mounted-backends description: HashiCorp List the currently mounted backends. hints: readOnly: true destructive: false idempotent: true call: vault-system.getsysmounts outputParameters: - type: object mapping: $. - name: hashicorp-enable-new-secrets-engine description: HashiCorp Enable a new secrets engine at the given path. hints: readOnly: false destructive: false idempotent: false call: vault-system.postsysmountspath with: body: tools.body outputParameters: - type: object mapping: $. - name: hashicorp-disable-mount-point-specified description: HashiCorp Disable the mount point specified at the given path. hints: readOnly: false destructive: true idempotent: true call: vault-system.deletesysmountspath outputParameters: - type: object mapping: $. - name: hashicorp-tune-backend-configuration-parameters description: HashiCorp Tune backend configuration parameters for this mount. hints: readOnly: true destructive: false idempotent: true call: vault-system.getsysmountspathtune outputParameters: - type: object mapping: $. - name: hashicorp-tune-backend-configuration-parameters-2 description: HashiCorp Tune backend configuration parameters for this mount. hints: readOnly: false destructive: false idempotent: false call: vault-system.postsysmountspathtune with: body: tools.body outputParameters: - type: object mapping: $. - name: hashicorp-lists-all-plugins-known description: HashiCorp Lists all the plugins known to Vault hints: readOnly: true destructive: false idempotent: true call: vault-system.getsyspluginscatalog outputParameters: - type: object mapping: $. - name: hashicorp-return-configuration-data-plugin description: HashiCorp Return the configuration data for the plugin with the given name. hints: readOnly: true destructive: false idempotent: true call: vault-system.getsyspluginscatalogname outputParameters: - type: object mapping: $. - name: hashicorp-register-new-plugin-updates description: HashiCorp Register a new plugin, or updates an existing one with the supplied name. hints: readOnly: false destructive: false idempotent: false call: vault-system.postsyspluginscatalogname with: body: tools.body outputParameters: - type: object mapping: $. - name: hashicorp-remove-plugin-given-name description: HashiCorp Remove the plugin with the given name. hints: readOnly: false destructive: true idempotent: true call: vault-system.deletesyspluginscatalogname outputParameters: - type: object mapping: $. - name: hashicorp-list-plugins-catalog description: HashiCorp List the plugins in the catalog. hints: readOnly: true destructive: false idempotent: true call: vault-system.getsyspluginscatalogtype with: list: tools.list outputParameters: - type: object mapping: $. - name: hashicorp-return-configuration-data-plugin-2 description: HashiCorp Return the configuration data for the plugin with the given name. hints: readOnly: true destructive: false idempotent: true call: vault-system.getsyspluginscatalogtypename outputParameters: - type: object mapping: $. - name: hashicorp-register-new-plugin-updates-2 description: HashiCorp Register a new plugin, or updates an existing one with the supplied name. hints: readOnly: false destructive: false idempotent: false call: vault-system.postsyspluginscatalogtypename with: body: tools.body outputParameters: - type: object mapping: $. - name: hashicorp-remove-plugin-given-name-2 description: HashiCorp Remove the plugin with the given name. hints: readOnly: false destructive: true idempotent: true call: vault-system.deletesyspluginscatalogtypename outputParameters: - type: object mapping: $. - name: hashicorp-reload-mounted-plugin-backends description: HashiCorp Reload mounted plugin backends. hints: readOnly: false destructive: false idempotent: false call: vault-system.postsyspluginsreloadbackend with: body: tools.body outputParameters: - type: object mapping: $. - name: hashicorp-list-configured-access-control description: HashiCorp List the configured access control policies. hints: readOnly: true destructive: false idempotent: true call: vault-system.getsyspoliciesacl with: list: tools.list outputParameters: - type: object mapping: $. - name: hashicorp-retrieve-information-about-named description: HashiCorp Retrieve information about the named ACL policy. hints: readOnly: true destructive: false idempotent: true call: vault-system.getsyspoliciesaclname outputParameters: - type: object mapping: $. - name: hashicorp-add-new-update-existing description: HashiCorp Add a new or update an existing ACL policy. hints: readOnly: false destructive: false idempotent: false call: vault-system.postsyspoliciesaclname with: body: tools.body outputParameters: - type: object mapping: $. - name: hashicorp-delete-acl-policy-given description: HashiCorp Delete the ACL policy with the given name. hints: readOnly: false destructive: true idempotent: true call: vault-system.deletesyspoliciesaclname outputParameters: - type: object mapping: $. - name: hashicorp-retrieve-existing-password-policy description: HashiCorp Retrieve an existing password policy. hints: readOnly: true destructive: false idempotent: true call: vault-system.getsyspoliciespasswordname outputParameters: - type: object mapping: $. - name: hashicorp-add-new-update-existing-2 description: HashiCorp Add a new or update an existing password policy. hints: readOnly: false destructive: false idempotent: false call: vault-system.postsyspoliciespasswordname with: body: tools.body outputParameters: - type: object mapping: $. - name: hashicorp-delete-password-policy description: HashiCorp Delete a password policy. hints: readOnly: false destructive: true idempotent: true call: vault-system.deletesyspoliciespasswordname outputParameters: - type: object mapping: $. - name: hashicorp-generate-password-existing-password description: HashiCorp Generate a password from an existing password policy. hints: readOnly: true destructive: false idempotent: true call: vault-system.getsyspoliciespasswordnamegenerate outputParameters: - type: object mapping: $. - name: hashicorp-list-configured-access-control-2 description: HashiCorp List the configured access control policies. hints: readOnly: true destructive: false idempotent: true call: vault-system.getsyspolicy with: list: tools.list outputParameters: - type: object mapping: $. - name: hashicorp-retrieve-policy-body-named description: HashiCorp Retrieve the policy body for the named policy. hints: readOnly: true destructive: false idempotent: true call: vault-system.getsyspolicyname outputParameters: - type: object mapping: $. - name: hashicorp-add-new-update-existing-3 description: HashiCorp Add a new or update an existing policy. hints: readOnly: false destructive: false idempotent: false call: vault-system.postsyspolicyname with: body: tools.body outputParameters: - type: object mapping: $. - name: hashicorp-delete-policy-given-name description: HashiCorp Delete the policy with the given name. hints: readOnly: false destructive: true idempotent: true call: vault-system.deletesyspolicyname outputParameters: - type: object mapping: $. - name: hashicorp-returns-html-page-listing description: HashiCorp Returns an HTML page listing the available profiles. hints: readOnly: true destructive: false idempotent: true call: vault-system.getsyspprof outputParameters: - type: object mapping: $. - name: hashicorp-returns-sampling-all-past description: HashiCorp Returns a sampling of all past memory allocations. hints: readOnly: true destructive: false idempotent: true call: vault-system.getsyspprofallocs outputParameters: - type: object mapping: $. - name: hashicorp-returns-stack-traces-that description: HashiCorp Returns stack traces that led to blocking on synchronization primitives hints: readOnly: true destructive: false idempotent: true call: vault-system.getsyspprofblock outputParameters: - type: object mapping: $. - name: hashicorp-returns-running-program-s-command description: HashiCorp Returns the running program's command line. hints: readOnly: true destructive: false idempotent: true call: vault-system.getsyspprofcmdline outputParameters: - type: object mapping: $. - name: hashicorp-returns-stack-traces-all description: HashiCorp Returns stack traces of all current goroutines. hints: readOnly: true destructive: false idempotent: true call: vault-system.getsyspprofgoroutine outputParameters: - type: object mapping: $. - name: hashicorp-returns-sampling-memory-allocations description: HashiCorp Returns a sampling of memory allocations of live object. hints: readOnly: true destructive: false idempotent: true call: vault-system.getsyspprofheap outputParameters: - type: object mapping: $. - name: hashicorp-returns-stack-traces-holders description: HashiCorp Returns stack traces of holders of contended mutexes hints: readOnly: true destructive: false idempotent: true call: vault-system.getsyspprofmutex outputParameters: - type: object mapping: $. - name: hashicorp-returns-pprof-formatted-cpu description: HashiCorp Returns a pprof-formatted cpu profile payload. hints: readOnly: true destructive: false idempotent: true call: vault-system.getsyspprofprofile outputParameters: - type: object mapping: $. - name: hashicorp-returns-program-counters-listed description: HashiCorp Returns the program counters listed in the request. hints: readOnly: true destructive: false idempotent: true call: vault-system.getsyspprofsymbol outputParameters: - type: object mapping: $. - name: hashicorp-returns-stack-traces-that-2 description: HashiCorp Returns stack traces that led to the creation of new OS threads hints: readOnly: true destructive: false idempotent: true call: vault-system.getsyspprofthreadcreate outputParameters: - type: object mapping: $. - name: hashicorp-returns-execution-trace-binary description: HashiCorp Returns the execution trace in binary form. hints: readOnly: true destructive: false idempotent: true call: vault-system.getsyspproftrace outputParameters: - type: object mapping: $. - name: getsysquotasconfig description: getsysquotasconfig hints: readOnly: true destructive: false idempotent: true call: vault-system.getsysquotasconfig outputParameters: - type: object mapping: $. - name: postsysquotasconfig description: postsysquotasconfig hints: readOnly: false destructive: false idempotent: false call: vault-system.postsysquotasconfig with: body: tools.body outputParameters: - type: object mapping: $. - name: getsysquotasratelimit description: getsysquotasratelimit hints: readOnly: true destructive: false idempotent: true call: vault-system.getsysquotasratelimit with: list: tools.list outputParameters: - type: object mapping: $. - name: getsysquotasratelimitname description: getsysquotasratelimitname hints: readOnly: true destructive: false idempotent: true call: vault-system.getsysquotasratelimitname outputParameters: - type: object mapping: $. - name: postsysquotasratelimitname description: postsysquotasratelimitname hints: readOnly: false destructive: false idempotent: false call: vault-system.postsysquotasratelimitname with: body: tools.body outputParameters: - type: object mapping: $. - name: deletesysquotasratelimitname description: deletesysquotasratelimitname hints: readOnly: false destructive: true idempotent: true call: vault-system.deletesysquotasratelimitname outputParameters: - type: object mapping: $. - name: hashicorp-read-value-key-given description: HashiCorp Read the value of the key at the given path. hints: readOnly: true destructive: false idempotent: true call: vault-system.getsysraw with: list: tools.list outputParameters: - type: object mapping: $. - name: hashicorp-update-value-key-given description: HashiCorp Update the value of the key at the given path. hints: readOnly: false destructive: false idempotent: false call: vault-system.postsysraw with: body: tools.body outputParameters: - type: object mapping: $. - name: hashicorp-delete-key-given-path description: HashiCorp Delete the key with given path. hints: readOnly: false destructive: true idempotent: true call: vault-system.deletesysraw outputParameters: - type: object mapping: $. - name: hashicorp-read-value-key-given-2 description: HashiCorp Read the value of the key at the given path. hints: readOnly: true destructive: false idempotent: true call: vault-system.getsysrawpath with: list: tools.list outputParameters: - type: object mapping: $. - name: hashicorp-update-value-key-given-2 description: HashiCorp Update the value of the key at the given path. hints: readOnly: false destructive: false idempotent: false call: vault-system.postsysrawpath with: body: tools.body outputParameters: - type: object mapping: $. - name: hashicorp-delete-key-given-path-2 description: HashiCorp Delete the key with given path. hints: readOnly: false destructive: true idempotent: true call: vault-system.deletesysrawpath outputParameters: - type: object mapping: $. - name: hashicorp-return-backup-copy-pgp description: HashiCorp Return the backup copy of PGP-encrypted unseal keys. hints: readOnly: true destructive: false idempotent: true call: vault-system.getsysrekeybackup outputParameters: - type: object mapping: $. - name: hashicorp-delete-backup-copy-pgp description: HashiCorp Delete the backup copy of PGP-encrypted unseal keys. hints: readOnly: false destructive: true idempotent: true call: vault-system.deletesysrekeybackup outputParameters: - type: object mapping: $. - name: hashicorp-reads-configuration-and-progress description: HashiCorp Reads the configuration and progress of the current rekey attempt. hints: readOnly: true destructive: false idempotent: true call: vault-system.getsysrekeyinit outputParameters: - type: object mapping: $. - name: hashicorp-initializes-new-rekey-attempt description: HashiCorp Initializes a new rekey attempt. hints: readOnly: false destructive: false idempotent: false call: vault-system.postsysrekeyinit with: body: tools.body outputParameters: - type: object mapping: $. - name: hashicorp-cancels-any-progress-rekey description: HashiCorp Cancels any in-progress rekey. hints: readOnly: false destructive: true idempotent: true call: vault-system.deletesysrekeyinit outputParameters: - type: object mapping: $. - name: hashicorp-allows-fetching-deleting-backup description: HashiCorp Allows fetching or deleting the backup of the rotated unseal keys. hints: readOnly: true destructive: false idempotent: true call: vault-system.getsysrekeyrecoverykeybackup outputParameters: - type: object mapping: $. - name: hashicorp-allows-fetching-deleting-backup-2 description: HashiCorp Allows fetching or deleting the backup of the rotated unseal keys. hints: readOnly: false destructive: true idempotent: true call: vault-system.deletesysrekeyrecoverykeybackup outputParameters: - type: object mapping: $. - name: hashicorp-enter-single-master-key-2 description: HashiCorp Enter a single master key share to progress the rekey of the Vault. hints: readOnly: false destructive: false idempotent: false call: vault-system.postsysrekeyupdate with: body: tools.body outputParameters: - type: object mapping: $. - name: hashicorp-read-configuration-and-progress-3 description: HashiCorp Read the configuration and progress of the current rekey verification attempt. hints: readOnly: true destructive: false idempotent: true call: vault-system.getsysrekeyverify outputParameters: - type: object mapping: $. - name: hashicorp-enter-single-new-key description: HashiCorp Enter a single new key share to progress the rekey verification operation. hints: readOnly: false destructive: false idempotent: false call: vault-system.postsysrekeyverify with: body: tools.body outputParameters: - type: object mapping: $. - name: hashicorp-cancel-any-progress-rekey description: HashiCorp Cancel any in-progress rekey verification operation. hints: readOnly: false destructive: true idempotent: true call: vault-system.deletesysrekeyverify outputParameters: - type: object mapping: $. - name: hashicorp-move-mount-point-already description: HashiCorp Move the mount point of an already-mounted backend. hints: readOnly: false destructive: false idempotent: false call: vault-system.postsysremount with: body: tools.body outputParameters: - type: object mapping: $. - name: hashicorp-renews-lease-requesting-extend-3 description: HashiCorp Renews a lease, requesting to extend the lease. hints: readOnly: false destructive: false idempotent: false call: vault-system.postsysrenew with: body: tools.body outputParameters: - type: object mapping: $. - name: hashicorp-renews-lease-requesting-extend-4 description: HashiCorp Renews a lease, requesting to extend the lease. hints: readOnly: false destructive: false idempotent: false call: vault-system.postsysrenewurlleaseid with: body: tools.body outputParameters: - type: object mapping: $. - name: getsysreplicationstatus description: getsysreplicationstatus hints: readOnly: true destructive: false idempotent: true call: vault-system.getsysreplicationstatus outputParameters: - type: object mapping: $. - name: hashicorp-revokes-lease-immediately-3 description: HashiCorp Revokes a lease immediately. hints: readOnly: false destructive: false idempotent: false call: vault-system.postsysrevoke with: body: tools.body outputParameters: - type: object mapping: $. - name: hashicorp-revokes-all-secrets-tokens-2 description: HashiCorp Revokes all secrets or tokens generated under a given prefix immediately hints: readOnly: false destructive: false idempotent: false call: vault-system.postsysrevokeforceprefix outputParameters: - type: object mapping: $. - name: hashicorp-revokes-all-secrets-lease-2 description: HashiCorp Revokes all secrets (via a lease ID prefix) or tokens (via the tokens' path property) generated under a given prefix immediately. hints: readOnly: false destructive: false idempotent: false call: vault-system.postsysrevokeprefixprefix with: body: tools.body outputParameters: - type: object mapping: $. - name: hashicorp-revokes-lease-immediately-4 description: HashiCorp Revokes a lease immediately. hints: readOnly: false destructive: false idempotent: false call: vault-system.postsysrevokeurlleaseid with: body: tools.body outputParameters: - type: object mapping: $. - name: hashicorp-rotates-backend-encryption-key description: HashiCorp Rotates the backend encryption key used to persist data. hints: readOnly: false destructive: false idempotent: false call: vault-system.postsysrotate outputParameters: - type: object mapping: $. - name: getsysrotateconfig description: getsysrotateconfig hints: readOnly: true destructive: false idempotent: true call: vault-system.getsysrotateconfig outputParameters: - type: object mapping: $. - name: postsysrotateconfig description: postsysrotateconfig hints: readOnly: false destructive: false idempotent: false call: vault-system.postsysrotateconfig with: body: tools.body outputParameters: - type: object mapping: $. - name: hashicorp-seal-vault description: HashiCorp Seal the Vault. hints: readOnly: false destructive: false idempotent: false call: vault-system.postsysseal outputParameters: - type: object mapping: $. - name: hashicorp-check-seal-status-vault description: HashiCorp Check the seal status of a Vault. hints: readOnly: true destructive: false idempotent: true call: vault-system.getsyssealstatus outputParameters: - type: object mapping: $. - name: hashicorp-cause-node-give-up description: HashiCorp Cause the node to give up active status. hints: readOnly: false destructive: false idempotent: false call: vault-system.postsysstepdown outputParameters: - type: object mapping: $. - name: hashicorp-generate-hash-sum-input description: HashiCorp Generate a hash sum for input data hints: readOnly: false destructive: false idempotent: false call: vault-system.postsystoolshash with: body: tools.body outputParameters: - type: object mapping: $. - name: hashicorp-generate-hash-sum-input-2 description: HashiCorp Generate a hash sum for input data hints: readOnly: false destructive: false idempotent: false call: vault-system.postsystoolshashurlalgorithm with: body: tools.body outputParameters: - type: object mapping: $. - name: hashicorp-generate-random-bytes description: HashiCorp Generate random bytes hints: readOnly: false destructive: false idempotent: false call: vault-system.postsystoolsrandom with: body: tools.body outputParameters: - type: object mapping: $. - name: hashicorp-generate-random-bytes-2 description: HashiCorp Generate random bytes hints: readOnly: false destructive: false idempotent: false call: vault-system.postsystoolsrandomurlbytes with: body: tools.body outputParameters: - type: object mapping: $. - name: hashicorp-unseal-vault description: HashiCorp Unseal the Vault. hints: readOnly: false destructive: false idempotent: false call: vault-system.postsysunseal with: body: tools.body outputParameters: - type: object mapping: $. - name: hashicorp-look-up-wrapping-properties description: HashiCorp Look up wrapping properties for the requester's token. hints: readOnly: true destructive: false idempotent: true call: vault-system.getsyswrappinglookup outputParameters: - type: object mapping: $. - name: hashicorp-look-up-wrapping-properties-2 description: HashiCorp Look up wrapping properties for the given token. hints: readOnly: false destructive: false idempotent: false call: vault-system.postsyswrappinglookup with: body: tools.body outputParameters: - type: object mapping: $. - name: hashicorp-rotates-response-wrapped-token description: HashiCorp Rotates a response-wrapped token. hints: readOnly: false destructive: false idempotent: false call: vault-system.postsyswrappingrewrap with: body: tools.body outputParameters: - type: object mapping: $. - name: hashicorp-unwraps-response-wrapped-token description: HashiCorp Unwraps a response-wrapped token. hints: readOnly: false destructive: false idempotent: false call: vault-system.postsyswrappingunwrap with: body: tools.body outputParameters: - type: object mapping: $. - name: hashicorp-response-wraps-arbitrary-json description: HashiCorp Response-wraps an arbitrary JSON object. hints: readOnly: false destructive: false idempotent: false call: vault-system.postsyswrappingwrap outputParameters: - type: object mapping: $.