MCPBundler Docs
MCPBundler Docs
Back to marketplaceGetting StartedAuthenticationTutorial - Bundle to Connected Agent
API Reference
Auth
Bundler
Bundles
Catalog
Deployments
Discover
LLM
MCP Listing Claims
MCP Listings
OAuth2
Observability
Organisations
Reviews
Roadmap
SCIM
Users
Utils
Vault
Create Vault EntryDelete Vault EntryList Vault EntriesUpdate Vault Entry
Webhooks
API ReferenceVault

Create Vault Entry

POST
/v1/vault/entries

Create a reusable vault entry from a credential form submission.

The credential payload is encrypted (encrypt) before it ever reaches the database - only the ciphertext is persisted. The created entry is owned by the calling user and is not visible to other users.

Args: body: Credential form data, including the plaintext credential payload to encrypt at rest. session: Database session. context: Caller's security context; determines entry ownership.

Returns: The created entry (without the credential value).

Raises: HTTPException: 400 if the underlying create operation fails.

Authorization

OAuth2AuthorizationCodeBearer
AuthorizationBearer <token>

In: header

Query Parameters

verify_locally?Verify Locally
Defaulttrue

Request Body

application/json

TypeScript Definitions

Use the request body type in TypeScript.

Response Body

application/json

application/json

curl -X POST "https://example.com/v1/vault/entries" \  -H "Content-Type: application/json" \  -d '{    "mcp_namespace": "string",    "provider_name": "string",    "auth_type": "string",    "credential_json": "string",    "display_name": "string"  }'
{  "id": "497f6eca-6276-4993-bfeb-53cbbbba6f08",  "mcp_namespace": "string",  "provider_name": "string",  "auth_type": "string",  "display_name": "string",  "oauth_email": "string",  "oauth_expires_at": "2019-08-24T14:15:22Z",  "created_at": "2019-08-24T14:15:22Z",  "updated_at": "2019-08-24T14:15:22Z",  "usage_count": 0,  "listing_id": "5322d4a9-51d2-4408-82fb-01ffecfb8304",  "config_json": "string"}
{  "detail": [    {      "loc": [        "string"      ],      "msg": "string",      "type": "string"    }  ]}

Vault

Endpoints in the Vault group.

Delete Vault Entry

Next Page

mcp_namespace*Mcp Namespace
Lengthlength <= 256
provider_name*Provider Name
Lengthlength <= 128
auth_type*Auth Type
Match^(bearer|api_key|basic|oauth2_cc|oauth2_pkce|azure_keyvault)$
credential_json*Credential Json

JSON-serialized credential — encrypted server-side.

display_name*Display Name
Lengthlength <= 128
oauth_email?|null
oauth_expires_at?|null
listing_id?|null
config_json?|

X-Mcp-Config-* headers serialized as JSON — non-secret, returned to frontend.