Create a vault

Create a Vault for securely storing MCP server credentials.

POST /api/v1/cloud/vaults

Creates a new Vault. A Vault is used to securely store credentials for MCP servers. Add credentials with Create a credential after creating the Vault.

Headers

Header	Required	Description
Authorization	Yes	Bearer $QODER_PAT
Content-Type	Yes	application/json

Request body

Field	Type	Required	Description
display_name	string	Yes	Vault display name, maximum 255 characters
metadata	object	No	Custom metadata

Example request

curl -X POST https://api.qoder.com/api/v1/cloud/vaults \
  -H "Authorization: Bearer $QODER_PAT" \
  -H "Content-Type: application/json" \
  -d '{
    "display_name": "my-mcp-vault",
    "metadata": {"team": "docs"}
  }'

Example response

HTTP 200 OK

{
  "id": "vault_019e3bb940277f0db05ab74291acf6ef",
  "type": "vault",
  "display_name": "my-mcp-vault",
  "metadata": {
    "team": "docs"
  },
  "credentials": [],
  "archived_at": null,
  "created_at": "2026-05-18T15:34:16.874877Z",
  "updated_at": "2026-05-18T15:34:16.874877Z"
}

Response fields

Field	Type	Description
id	string	Vault unique identifier with the vault_ prefix
type	string	Always "vault"
display_name	string	Vault display name
metadata	object	Custom metadata
credentials	array	Always empty when creating a Vault; add credentials afterward with the create credential endpoint
archived_at	string | null	Archive time, or null when active
created_at	string	Creation time (ISO 8601)
updated_at	string	Last update time (ISO 8601)

Errors

HTTP	Type	Trigger
400	invalid_request_error	Missing or invalid display_name, or invalid metadata
400	invalid_request_error	The request body contains the unsupported credentials field; the error message is Field 'credentials' is not supported on vault create.
401	TOKEN_INVALID	Missing or invalid authentication token

See Errors for the full error envelope.

Related

Authenticate with vaults

Store and inject secrets safely into agent sessions.