# Vault API (/en/docs/api/native/vault)



Vault stores write-only credentials through `/vault/v1`, with a compatibility face at `/anthropic/v1/vaults`. Concepts and behavior follow Anthropic vaults (credential collections, write-only values, rotation and archival), so Anthropic experience applies. Differences: native secrets use names and static/oauth kinds; native OAuth uses authorizations, while compatible mcp\_oauth creation and updates return 501; explicit allowed\_hosts are required, with no unrestricted mode; Agent sessions reject nonempty vault\_ids, so vault-backed MCP authentication is unavailable; application vault references return 501, including praxis\_vault\_ref bindings and secret writes with a vault source. Metadata labels do not attach credentials to either resource. Start with `praxis.vault.vaults.create` to create the containing vault.

Use your API Key as a Bearer credential to manage vaults and secrets at the address below. Secret values are write-only; no endpoint returns them.

`https://api.deepraxis.ai/vault/v1`

[Guide →](/en/docs/developers/services/vault/quickstart)

| Resource | Path |
| --- | --- |
| [Vaults](/en/docs/api/native/vault/vaults) | /vault/v1/vaults |
| [Secret](/en/docs/api/native/vault/secrets) | /vault/v1/vaults/{vault_id}/secrets |
| [Templates](/en/docs/api/native/vault/templates) | /vault/v1/templates |
| [Authorizations](/en/docs/api/native/vault/authorizations) | /vault/v1/authorizations |

Address a secret by its name or its vsec\_ ID. Lists page with cursor and limit (default 50, at most 200); a null next\_cursor means there is no next page.

The same vaults are also reachable through the Claude Managed Agents vaults API: [Claude Managed Agents](/en/docs/api/compatible/anthropic/managed-agents)

[Error codes](/en/docs/api/native/vault/errors)