Connectors

Cloud Infrastructure & DevOps

HashiCorp Vault

Secrets and encryption: read and write secrets, issue certificates, and manage auth methods and policies

Signs in with: API key
Runs on: Cloud or On-Prem Worker
Operations: 1,101
Ready-made triggers: 0

Connect HashiCorp Vault

In Neblex open Connect › Connections and click New Connection.
Search for HashiCorp Vault and give the connection a clear name.
Fill in the fields. Secret values are encrypted and never shown again.
Click Test, then Create Connection.

Field	What to enter
Vault addressRequired	Host and port of the Vault server without the scheme, for example vault.example.com:8200. Add a path when Vault is served below one.
Vault tokenOptionalSecret	Sent as X-Vault-Token. Login operations run without a token and return one.
NamespaceOptional	Vault Enterprise or HCP Vault namespace, sent as X-Vault-Namespace. Leave empty for the root namespace.

Use it in a flow

Open a flow, open the node library and search for HashiCorp Vault.
Drag it onto the canvas and choose an Operation and your connection.
Map the operation's fields from earlier steps, or click Map with Matt.
Use Test this step to see what it returns, then save.

To start a flow from HashiCorp Vault without a ready-made trigger: a Poll for changes trigger can check one of its list operations on a schedule and pass on only what is new; if HashiCorp Vault can send webhooks, a Webhook trigger receives them at its own URL.

Operations

1,101 operations in 39 groups. Each one is a step you can add to a flow.

AliCloud auth6

Ali cloud delete auth role`aliCloudDeleteAuthRole`	DELETE	Create a role and associate policies to it.
Ali cloud list auth roles`aliCloudListAuthRoles`	GET	Lists all the roles that are registered with Vault.
Ali cloud list auth roles2`aliCloudListAuthRoles2`	GET	Lists all the roles that are registered with Vault.
Ali cloud read auth role`aliCloudReadAuthRole`	GET	Create a role and associate policies to it.
Ali cloud write auth role`aliCloudWriteAuthRole`	POST	Create a role and associate policies to it.
Authenticates an RAM entity with Vault`aliCloudLogin`	POST	Authenticates an RAM entity with Vault.

AliCloud secrets8

Ali cloud configure`aliCloudConfigure`	POST	Configure the access key and secret to use for RAM and STS calls.
Ali cloud delete configuration`aliCloudDeleteConfiguration`	DELETE	Configure the access key and secret to use for RAM and STS calls.
Ali cloud delete role`aliCloudDeleteRole`	DELETE	Read, write and reference policies and roles that API keys or STS credentials can be made for.
Ali cloud list roles`aliCloudListRoles`	GET	List the existing roles in this backend.
Ali cloud read configuration`aliCloudReadConfiguration`	GET	Configure the access key and secret to use for RAM and STS calls.
Ali cloud read role`aliCloudReadRole`	GET	Read, write and reference policies and roles that API keys or STS credentials can be made for.
Ali cloud write role`aliCloudWriteRole`	POST	Read, write and reference policies and roles that API keys or STS credentials can be made for.
Generate an API key or STS credential using the given role's configuration.'`aliCloudGenerateCredentials`	GET	Generate an API key or STS credential using the given role's configuration.'

AppRole auth51

App role delete bind secret ID`appRoleDeleteBindSecretId`	DELETE	Impose secret id to be presented during login using this role.
App role delete bound CIDR list`appRoleDeleteBoundCidrList`	DELETE	Deprecated: Comma separated list of CIDR blocks, if set, specifies blocks of IP addresses which can perform the login operation
App role delete period`appRoleDeletePeriod`	DELETE	Updates the value of 'period' on the role
App role delete policies`appRoleDeletePolicies`	DELETE	Policies of the role.
App role delete role`appRoleDeleteRole`	DELETE	Register an role with the backend.
App role delete secret ID bound cidrs`appRoleDeleteSecretIdBoundCidrs`	DELETE	Comma separated list of CIDR blocks, if set, specifies blocks of IP addresses which can perform the login operation
App role delete secret ID num uses`appRoleDeleteSecretIdNumUses`	DELETE	Use limit of the SecretID generated against the role.
App role delete secret ID TTL`appRoleDeleteSecretIdTtl`	DELETE	Duration in seconds of the SecretID generated against the role.
App role delete token bound cidrs`appRoleDeleteTokenBoundCidrs`	DELETE	Comma separated string or list of CIDR blocks.
App role delete token max TTL`appRoleDeleteTokenMaxTtl`	DELETE	Duration in seconds, the maximum lifetime of the tokens issued by using the SecretIDs that were generated against this role, after which the tokens are not allowed to be renewed.
App role delete token num uses`appRoleDeleteTokenNumUses`	DELETE	Number of times issued tokens can be used
App role delete token TTL`appRoleDeleteTokenTtl`	DELETE	Duration in seconds, the lifetime of the token issued by using the SecretID that is generated against this role, before which the token needs to be renewed.
App role destroy secret ID`appRoleDestroySecretId`	POST	Invalidate an issued secret id
App role destroy secret ID by accessor`appRoleDestroySecretIdByAccessor`	POST	Vault POST /auth/{approle mount path}/role/{role name}/secret-id-accessor/destroy.
App role destroy secret ID by accessor2`appRoleDestroySecretIdByAccessor2`	DELETE	Vault DELETE /auth/{approle mount path}/role/{role name}/secret-id-accessor/destroy.
App role destroy secret id2`appRoleDestroySecretId2`	DELETE	Invalidate an issued secret id
App role list roles`appRoleListRoles`	GET	Lists all the roles registered with the backend.
App role list secret IDS`appRoleListSecretIds`	GET	Generate a SecretID against this role.
App role login`appRoleLogin`	POST	Issue a token based on the credentials supplied
App role look up secret ID`appRoleLookUpSecretId`	POST	Read the properties of an issued secret id
App role look up secret ID by accessor`appRoleLookUpSecretIdByAccessor`	POST	Vault POST /auth/{approle mount path}/role/{role name}/secret-id-accessor/lookup.
App role read bind secret ID`appRoleReadBindSecretId`	GET	Impose secret id to be presented during login using this role.
App role read bound CIDR list`appRoleReadBoundCidrList`	GET	Deprecated: Comma separated list of CIDR blocks, if set, specifies blocks of IP addresses which can perform the login operation
App role read local secret IDS`appRoleReadLocalSecretIds`	GET	Enables cluster local secret IDs
App role read period`appRoleReadPeriod`	GET	Updates the value of 'period' on the role
App role read policies`appRoleReadPolicies`	GET	Policies of the role.
App role read role`appRoleReadRole`	GET	Register an role with the backend.
App role read role ID`appRoleReadRoleId`	GET	Returns the 'role id' of the role.
App role read secret ID bound cidrs`appRoleReadSecretIdBoundCidrs`	GET	Comma separated list of CIDR blocks, if set, specifies blocks of IP addresses which can perform the login operation
App role read secret ID num uses`appRoleReadSecretIdNumUses`	GET	Use limit of the SecretID generated against the role.
App role read secret ID TTL`appRoleReadSecretIdTtl`	GET	Duration in seconds of the SecretID generated against the role.
App role read token bound cidrs`appRoleReadTokenBoundCidrs`	GET	Comma separated string or list of CIDR blocks.
App role read token max TTL`appRoleReadTokenMaxTtl`	GET	Duration in seconds, the maximum lifetime of the tokens issued by using the SecretIDs that were generated against this role, after which the tokens are not allowed to be renewed.
App role read token num uses`appRoleReadTokenNumUses`	GET	Number of times issued tokens can be used
App role read token TTL`appRoleReadTokenTtl`	GET	Duration in seconds, the lifetime of the token issued by using the SecretID that is generated against this role, before which the token needs to be renewed.
App role tidy secret ID`appRoleTidySecretId`	POST	Trigger the clean-up of expired SecretID entries.
App role write bind secret ID`appRoleWriteBindSecretId`	POST	Impose secret id to be presented during login using this role.
App role write bound CIDR list`appRoleWriteBoundCidrList`	POST	Deprecated: Comma separated list of CIDR blocks, if set, specifies blocks of IP addresses which can perform the login operation
App role write custom secret ID`appRoleWriteCustomSecretId`	POST	Assign a SecretID of choice against the role.
App role write period`appRoleWritePeriod`	POST	Updates the value of 'period' on the role
App role write policies`appRoleWritePolicies`	POST	Policies of the role.
App role write role`appRoleWriteRole`	POST	Register an role with the backend.
App role write role ID`appRoleWriteRoleId`	POST	Returns the 'role id' of the role.
App role write secret ID`appRoleWriteSecretId`	POST	Generate a SecretID against this role.
App role write secret ID bound cidrs`appRoleWriteSecretIdBoundCidrs`	POST	Comma separated list of CIDR blocks, if set, specifies blocks of IP addresses which can perform the login operation
App role write secret ID num uses`appRoleWriteSecretIdNumUses`	POST	Use limit of the SecretID generated against the role.
App role write secret ID TTL`appRoleWriteSecretIdTtl`	POST	Duration in seconds of the SecretID generated against the role.
App role write token bound cidrs`appRoleWriteTokenBoundCidrs`	POST	Comma separated string or list of CIDR blocks.
App role write token max TTL`appRoleWriteTokenMaxTtl`	POST	Duration in seconds, the maximum lifetime of the tokens issued by using the SecretIDs that were generated against this role, after which the tokens are not allowed to be renewed.
App role write token num uses`appRoleWriteTokenNumUses`	POST	Number of times issued tokens can be used
App role write token TTL`appRoleWriteTokenTtl`	POST	Duration in seconds, the lifetime of the token issued by using the SecretID that is generated against this role, before which the token needs to be renewed.

AWS auth51

AWS configure certificate`awsConfigureCertificate`	POST	Adds the AWS Public Key that is used to verify the PKCS 7 signature of the identity document.
AWS configure client`awsConfigureClient`	POST	Configure AWS IAM credentials that are used to query instance and role details from the AWS API.
AWS configure identity access list tidy operation`awsConfigureIdentityAccessListTidyOperation`	POST	Configures the periodic tidying operation of the access list identity entries.
AWS configure identity integration`awsConfigureIdentityIntegration`	POST	Configure the way the AWS auth method interacts with the identity store
AWS configure identity whitelist tidy operation`awsConfigureIdentityWhitelistTidyOperation`	POST	Configures the periodic tidying operation of the access list identity entries.
AWS configure role tag blacklist tidy operation`awsConfigureRoleTagBlacklistTidyOperation`	POST	Configures the periodic tidying operation of the deny listed role tag entries.
AWS configure role tag deny list tidy operation`awsConfigureRoleTagDenyListTidyOperation`	POST	Configures the periodic tidying operation of the deny listed role tag entries.
AWS delete auth role`awsDeleteAuthRole`	DELETE	Create a role and associate policies to it.
AWS delete certificate configuration`awsDeleteCertificateConfiguration`	DELETE	Adds the AWS Public Key that is used to verify the PKCS 7 signature of the identity document.
AWS delete client configuration`awsDeleteClientConfiguration`	DELETE	Configure AWS IAM credentials that are used to query instance and role details from the AWS API.
AWS delete identity access list`awsDeleteIdentityAccessList`	DELETE	Read or delete entries in the identity access list.
AWS delete identity access list tidy settings`awsDeleteIdentityAccessListTidySettings`	DELETE	Configures the periodic tidying operation of the access list identity entries.
AWS delete identity whitelist`awsDeleteIdentityWhitelist`	DELETE	Read or delete entries in the identity access list.
AWS delete identity whitelist tidy settings`awsDeleteIdentityWhitelistTidySettings`	DELETE	Configures the periodic tidying operation of the access list identity entries.
AWS delete role tag blacklist`awsDeleteRoleTagBlacklist`	DELETE	Blacklist a previously created role tag.
AWS delete role tag blacklist tidy settings`awsDeleteRoleTagBlacklistTidySettings`	DELETE	Configures the periodic tidying operation of the deny listed role tag entries.
AWS delete role tag deny list`awsDeleteRoleTagDenyList`	DELETE	Blacklist a previously created role tag.
AWS delete role tag deny list tidy settings`awsDeleteRoleTagDenyListTidySettings`	DELETE	Configures the periodic tidying operation of the deny listed role tag entries.
AWS delete sts role`awsDeleteStsRole`	DELETE	Specify STS roles to be assumed for certain AWS accounts.
AWS list auth roles`awsListAuthRoles`	GET	Lists all the roles that are registered with Vault.
AWS list auth roles2`awsListAuthRoles2`	GET	Lists all the roles that are registered with Vault.
AWS list certificate configurations`awsListCertificateConfigurations`	GET	Lists all the AWS public certificates that are registered with the backend.
AWS list identity access list`awsListIdentityAccessList`	GET	Lists the items present in the identity access list.
AWS list identity whitelist`awsListIdentityWhitelist`	GET	Lists the items present in the identity access list.
AWS list role tag blacklists`awsListRoleTagBlacklists`	GET	Lists the deny list role tags.
AWS list role tag deny lists`awsListRoleTagDenyLists`	GET	Lists the deny list role tags.
AWS list sts role relationships`awsListStsRoleRelationships`	GET	List all the AWS account/STS role relationships registered with Vault.
AWS login`awsLogin`	POST	Authenticates an EC2 instance with Vault.
AWS read auth role`awsReadAuthRole`	GET	Create a role and associate policies to it.
AWS read certificate configuration`awsReadCertificateConfiguration`	GET	Adds the AWS Public Key that is used to verify the PKCS 7 signature of the identity document.
AWS read client configuration`awsReadClientConfiguration`	GET	Configure AWS IAM credentials that are used to query instance and role details from the AWS API.
AWS read identity access list`awsReadIdentityAccessList`	GET	Read or delete entries in the identity access list.
AWS read identity access list tidy settings`awsReadIdentityAccessListTidySettings`	GET	Configures the periodic tidying operation of the access list identity entries.
AWS read identity integration configuration`awsReadIdentityIntegrationConfiguration`	GET	Configure the way the AWS auth method interacts with the identity store
AWS read identity whitelist`awsReadIdentityWhitelist`	GET	Read or delete entries in the identity access list.
AWS read identity whitelist tidy settings`awsReadIdentityWhitelistTidySettings`	GET	Configures the periodic tidying operation of the access list identity entries.
AWS read role tag blacklist`awsReadRoleTagBlacklist`	GET	Blacklist a previously created role tag.
AWS read role tag blacklist tidy settings`awsReadRoleTagBlacklistTidySettings`	GET	Configures the periodic tidying operation of the deny listed role tag entries.
AWS read role tag deny list`awsReadRoleTagDenyList`	GET	Blacklist a previously created role tag.
AWS read role tag deny list tidy settings`awsReadRoleTagDenyListTidySettings`	GET	Configures the periodic tidying operation of the deny listed role tag entries.
AWS read sts role`awsReadStsRole`	GET	Specify STS roles to be assumed for certain AWS accounts.
AWS rotate root credentials`awsRotateRootCredentials`	POST	Request to rotate the AWS credentials used by Vault
AWS tidy identity access list`awsTidyIdentityAccessList`	POST	Clean-up the access list instance identity entries.
AWS tidy identity whitelist`awsTidyIdentityWhitelist`	POST	Clean-up the access list instance identity entries.
AWS tidy role tag blacklist`awsTidyRoleTagBlacklist`	POST	Clean-up the deny list role tag entries.
AWS tidy role tag deny list`awsTidyRoleTagDenyList`	POST	Clean-up the deny list role tag entries.
AWS write auth role`awsWriteAuthRole`	POST	Create a role and associate policies to it.
AWS write role tag`awsWriteRoleTag`	POST	Create a tag on a role in order to be able to further restrict the capabilities of a role.
AWS write role tag blacklist`awsWriteRoleTagBlacklist`	POST	Blacklist a previously created role tag.
AWS write role tag deny list`awsWriteRoleTagDenyList`	POST	Blacklist a previously created role tag.
AWS write sts role`awsWriteStsRole`	POST	Specify STS roles to be assumed for certain AWS accounts.

AWS secrets18

AWS configure lease`awsConfigureLease`	POST	Configure the default lease information for generated credentials.
AWS configure root iam credentials`awsConfigureRootIamCredentials`	POST	Configure the root credentials that are used to manage IAM.
AWS delete role`awsDeleteRole`	DELETE	Read, write and reference IAM policies that access keys can be made for.
AWS delete static roles name`awsDeleteStaticRolesName`	DELETE	Manage static roles for AWS.
AWS generate credentials`awsGenerateCredentials`	GET	Generate AWS credentials from a specific Vault role.
AWS generate credentials with parameters`awsGenerateCredentialsWithParameters`	POST	Generate AWS credentials from a specific Vault role.
AWS generate sts credentials`awsGenerateStsCredentials`	GET	Generate AWS credentials from a specific Vault role.
AWS generate sts credentials with parameters`awsGenerateStsCredentialsWithParameters`	POST	Generate AWS credentials from a specific Vault role.
AWS list roles`awsListRoles`	GET	List the existing roles in this backend
AWS list static roles`awsListStaticRoles`	GET	Manage static roles for AWS.
AWS read lease configuration`awsReadLeaseConfiguration`	GET	Configure the default lease information for generated credentials.
AWS read role`awsReadRole`	GET	Read, write and reference IAM policies that access keys can be made for.
AWS read root iam credentials configuration`awsReadRootIamCredentialsConfiguration`	GET	Configure the root credentials that are used to manage IAM.
AWS read static creds name`awsReadStaticCredsName`	GET	Retrieve static credentials from the named role.
AWS read static roles name`awsReadStaticRolesName`	GET	Manage static roles for AWS.
AWS rotate root iam credentials`awsRotateRootIamCredentials`	POST	Request to rotate the AWS credentials used by Vault
AWS write role`awsWriteRole`	POST	Read, write and reference IAM policies that access keys can be made for.
AWS write static roles name`awsWriteStaticRolesName`	POST	Manage static roles for AWS.

Azure auth9

Azure configure auth`azureConfigureAuth`	POST	Configures the Azure authentication backend.
Azure delete auth configuration`azureDeleteAuthConfiguration`	DELETE	Configures the Azure authentication backend.
Azure delete auth role`azureDeleteAuthRole`	DELETE	Register an role with the backend.
Azure list auth roles`azureListAuthRoles`	GET	Lists all the roles registered with the backend.
Azure login`azureLogin`	POST	Authenticates Azure Managed Service Identities with Vault.
Azure read auth configuration`azureReadAuthConfiguration`	GET	Configures the Azure authentication backend.
Azure read auth role`azureReadAuthRole`	GET	Register an role with the backend.
Azure rotate root credentials`azureRotateRootCredentials`	POST	Attempt to rotate the root credentials used to communicate with Azure.
Azure write auth role`azureWriteAuthRole`	POST	Register an role with the backend.

Azure secrets9

Azure configure`azureConfigure`	POST	Configure the Azure Secret backend.
Azure delete configuration`azureDeleteConfiguration`	DELETE	Configure the Azure Secret backend.
Azure delete role`azureDeleteRole`	DELETE	Manage the Vault roles used to generate Azure credentials.
Azure read configuration`azureReadConfiguration`	GET	Configure the Azure Secret backend.
Azure read role`azureReadRole`	GET	Manage the Vault roles used to generate Azure credentials.
Azure request service principal credentials`azureRequestServicePrincipalCredentials`	GET	Request Service Principal credentials for a given Vault role.
Azure rotate root`azureRotateRoot`	POST	Attempt to rotate the root credentials used to communicate with Azure.
Azure write role`azureWriteRole`	POST	Manage the Vault roles used to generate Azure credentials.
List existing roles`azureListRoles`	GET	List existing roles.

Cloud Foundry auth8

Cloud foundry configure`cloudFoundryConfigure`	POST	Provide Vault with the CA certificate used to issue all client certificates.
Cloud foundry delete configuration`cloudFoundryDeleteConfiguration`	DELETE	Provide Vault with the CA certificate used to issue all client certificates.
Cloud foundry delete role`cloudFoundryDeleteRole`	DELETE	Read, write and reference policies and roles that tokens can be made for.
Cloud foundry list roles`cloudFoundryListRoles`	GET	List the existing roles in this backend.
Cloud foundry login`cloudFoundryLogin`	POST	Authenticates an entity with Vault.
Cloud foundry read configuration`cloudFoundryReadConfiguration`	GET	Provide Vault with the CA certificate used to issue all client certificates.
Cloud foundry read role`cloudFoundryReadRole`	GET	Read, write and reference policies and roles that tokens can be made for.
Cloud foundry write role`cloudFoundryWriteRole`	POST	Read, write and reference policies and roles that tokens can be made for.

Consul secrets7

Consul configure access`consulConfigureAccess`	POST	Vault POST /{consul mount path}/config/access.
Consul delete role`consulDeleteRole`	DELETE	Vault DELETE /{consul mount path}/roles/{name}.
Consul generate credentials`consulGenerateCredentials`	GET	Vault GET /{consul mount path}/creds/{role}.
Consul list roles`consulListRoles`	GET	Vault GET /{consul mount path}/roles/.
Consul read access configuration`consulReadAccessConfiguration`	GET	Vault GET /{consul mount path}/config/access.
Consul read role`consulReadRole`	GET	Vault GET /{consul mount path}/roles/{name}.
Consul write role`consulWriteRole`	POST	Vault POST /{consul mount path}/roles/{name}.

Cubbyhole4

Cubbyhole write`cubbyholeWrite`	POST	Store a secret at the specified location, or (enterprise-only) recover it from given snapshot Id.
Deletes the secret at the specified location`cubbyholeDelete`	DELETE	Deletes the secret at the specified location.
List secret entries at the specified location`cubbyholeList`	GET	List secret entries at the specified location.
Retrieve the secret at the specified location`cubbyholeRead`	GET	Retrieve the secret at the specified location.

Database secrets18

Configure connection details to a database plugin`databaseListConnections`	GET	Configure connection details to a database plugin.
Database configure connection`databaseConfigureConnection`	POST	Configure connection details to a database plugin.
Database delete connection configuration`databaseDeleteConnectionConfiguration`	DELETE	Configure connection details to a database plugin.
Database delete role`databaseDeleteRole`	DELETE	Manage the roles that can be created with this backend.
Database delete static role`databaseDeleteStaticRole`	DELETE	Manage the static roles that can be created with this backend.
Database list roles`databaseListRoles`	GET	Manage the roles that can be created with this backend.
Database list static roles`databaseListStaticRoles`	GET	Manage the static roles that can be created with this backend.
Database read connection configuration`databaseReadConnectionConfiguration`	GET	Configure connection details to a database plugin.
Database read role`databaseReadRole`	GET	Manage the roles that can be created with this backend.
Database read static role`databaseReadStaticRole`	GET	Manage the static roles that can be created with this backend.
Database rotate root credentials`databaseRotateRootCredentials`	POST	Request to rotate the root credentials for a certain database connection.
Database rotate static role credentials`databaseRotateStaticRoleCredentials`	POST	Request to rotate the credentials for a static user account.
Database write role`databaseWriteRole`	POST	Manage the roles that can be created with this backend.
Database write static role`databaseWriteStaticRole`	POST	Manage the static roles that can be created with this backend.
Reloads all connections using a named database plugin`databaseReloadPlugin`	POST	Reloads all connections using a named database plugin.
Request database credentials for a certain role`databaseGenerateCredentials`	GET	Request database credentials for a certain role.
Request database credentials for a certain static role`databaseReadStaticRoleCredentials`	GET	Request database credentials for a certain static role.
Resets a database plugin`databaseResetConnection`	POST	Resets a database plugin.

GitHub auth13

Github configure`githubConfigure`	POST	Vault POST /auth/{github mount path}/config.
Github delete team mapping`githubDeleteTeamMapping`	DELETE	Read/write/delete a single teams mapping
Github delete user mapping`githubDeleteUserMapping`	DELETE	Read/write/delete a single users mapping
Github list teams`githubListTeams`	GET	Read mappings for teams
Github list teams2`githubListTeams2`	GET	Read mappings for teams
Github list users`githubListUsers`	GET	Read mappings for users
Github list users2`githubListUsers2`	GET	Read mappings for users
Github login`githubLogin`	POST	Vault POST /auth/{github mount path}/login.
Github read configuration`githubReadConfiguration`	GET	Vault GET /auth/{github mount path}/config.
Github read team mapping`githubReadTeamMapping`	GET	Read/write/delete a single teams mapping
Github read user mapping`githubReadUserMapping`	GET	Read/write/delete a single users mapping
Github write team mapping`githubWriteTeamMapping`	POST	Read/write/delete a single teams mapping
Github write user mapping`githubWriteUserMapping`	POST	Read/write/delete a single users mapping

Google Cloud auth11

Add or remove labels for an existing 'gce' role`googleCloudEditLabelsForRole`	POST	Add or remove labels for an existing 'gce' role
Add or remove service accounts for an existing `iam` role`googleCloudEditServiceAccountsForRole`	POST	Add or remove service accounts for an existing iam role
Google cloud configure auth`googleCloudConfigureAuth`	POST	Configure credentials used to query the GCP IAM API to verify authenticating service accounts
Google cloud delete role`googleCloudDeleteRole`	DELETE	Create a GCP role with associated policies and required attributes.
Google cloud list roles`googleCloudListRoles`	GET	Lists all the roles that are registered with Vault.
Google cloud list roles2`googleCloudListRoles2`	GET	Lists all the roles that are registered with Vault.
Google cloud login`googleCloudLogin`	POST	Authenticates Google Cloud Platform entities with Vault.
Google cloud read auth configuration`googleCloudReadAuthConfiguration`	GET	Configure credentials used to query the GCP IAM API to verify authenticating service accounts
Google cloud read role`googleCloudReadRole`	GET	Create a GCP role with associated policies and required attributes.
Google cloud rotate root credentials auth`googleCloudRotateRootCredentialsAuth`	POST	Request to rotate the GCP credentials used by Vault
Google cloud write role`googleCloudWriteRole`	POST	Create a GCP role with associated policies and required attributes.

Google Cloud KMS secrets21

Encrypt a plaintext value using a named key`googleCloudKmsEncrypt`	POST	Encrypt a plaintext value using a named key
Google cloud KMS configure`googleCloudKmsConfigure`	POST	Configure the GCP KMS secrets engine
Google cloud KMS configure key`googleCloudKmsConfigureKey`	POST	Configure the key in Vault
Google cloud KMS decrypt`googleCloudKmsDecrypt`	POST	Decrypt a ciphertext value using a named key
Google cloud KMS delete configuration`googleCloudKmsDeleteConfiguration`	DELETE	Configure the GCP KMS secrets engine
Google cloud KMS delete key`googleCloudKmsDeleteKey`	DELETE	Interact with crypto keys in Vault and Google Cloud KMS
Google cloud KMS deregister key`googleCloudKmsDeregisterKey`	POST	Deregister an existing key in Vault
Google cloud KMS deregister key2`googleCloudKmsDeregisterKey2`	DELETE	Deregister an existing key in Vault
Google cloud KMS read configuration`googleCloudKmsReadConfiguration`	GET	Configure the GCP KMS secrets engine
Google cloud KMS read key`googleCloudKmsReadKey`	GET	Interact with crypto keys in Vault and Google Cloud KMS
Google cloud KMS read key configuration`googleCloudKmsReadKeyConfiguration`	GET	Configure the key in Vault
Google cloud KMS trim key versions`googleCloudKmsTrimKeyVersions`	POST	Delete old crypto key versions from Google Cloud KMS
Google cloud KMS trim key versions2`googleCloudKmsTrimKeyVersions2`	DELETE	Delete old crypto key versions from Google Cloud KMS
Google cloud KMS write key`googleCloudKmsWriteKey`	POST	Interact with crypto keys in Vault and Google Cloud KMS
List named keys`googleCloudKmsListKeys`	GET	List named keys
Re-encrypt existing ciphertext data to a new version`googleCloudKmsReencrypt`	POST	Re-encrypt existing ciphertext data to a new version
Register an existing crypto key in Google Cloud KMS`googleCloudKmsRegisterKey`	POST	Register an existing crypto key in Google Cloud KMS
Retrieve the public key associated with the named key`googleCloudKmsRetrievePublicKey`	GET	Retrieve the public key associated with the named key
Rotate a crypto key to a new primary version`googleCloudKmsRotateKey`	POST	Rotate a crypto key to a new primary version
Signs a message or digest using a named key`googleCloudKmsSign`	POST	Signs a message or digest using a named key
Verify a signature using a named key`googleCloudKmsVerify`	POST	Verify a signature using a named key

Google Cloud secrets35

Google cloud configure`googleCloudConfigure`	POST	Configure the GCP backend.
Google cloud delete impersonated account`googleCloudDeleteImpersonatedAccount`	DELETE	Register and manage a GCP service account to generate credentials under
Google cloud delete roleset`googleCloudDeleteRoleset`	DELETE	Read/write sets of IAM roles to be given to generated credentials for specified GCP resources.
Google cloud delete static account`googleCloudDeleteStaticAccount`	DELETE	Register and manage a GCP service account to generate credentials under
Google cloud generate impersonated account access token`googleCloudGenerateImpersonatedAccountAccessToken`	GET	Generate an OAuth2 access token secret.
Google cloud generate impersonated account access token2`googleCloudGenerateImpersonatedAccountAccessToken2`	POST	Generate an OAuth2 access token secret.
Google cloud generate roleset access token`googleCloudGenerateRolesetAccessToken`	POST	Generate an OAuth2 access token secret.
Google cloud generate roleset access token2`googleCloudGenerateRolesetAccessToken2`	GET	Generate an OAuth2 access token secret.
Google cloud generate roleset access token3`googleCloudGenerateRolesetAccessToken3`	POST	Generate an OAuth2 access token secret.
Google cloud generate roleset access token4`googleCloudGenerateRolesetAccessToken4`	GET	Generate an OAuth2 access token secret.
Google cloud generate roleset key`googleCloudGenerateRolesetKey`	POST	Generate a service account private key secret.
Google cloud generate roleset key2`googleCloudGenerateRolesetKey2`	GET	Generate a service account private key secret.
Google cloud generate roleset key3`googleCloudGenerateRolesetKey3`	POST	Generate a service account private key secret.
Google cloud generate roleset key4`googleCloudGenerateRolesetKey4`	GET	Generate a service account private key secret.
Google cloud generate static account access token`googleCloudGenerateStaticAccountAccessToken`	POST	Generate an OAuth2 access token secret.
Google cloud generate static account access token2`googleCloudGenerateStaticAccountAccessToken2`	GET	Generate an OAuth2 access token secret.
Google cloud generate static account key`googleCloudGenerateStaticAccountKey`	POST	Generate a service account private key secret.
Google cloud generate static account key2`googleCloudGenerateStaticAccountKey2`	GET	Generate a service account private key secret.
Google cloud list impersonated accounts`googleCloudListImpersonatedAccounts`	GET	List created impersonated accounts.
Google cloud list impersonated accounts2`googleCloudListImpersonatedAccounts2`	GET	List created impersonated accounts.
Google cloud list rolesets`googleCloudListRolesets`	GET	List existing rolesets.
Google cloud list rolesets2`googleCloudListRolesets2`	GET	List existing rolesets.
Google cloud list static accounts`googleCloudListStaticAccounts`	GET	List created static accounts.
Google cloud list static accounts2`googleCloudListStaticAccounts2`	GET	List created static accounts.
Google cloud read configuration`googleCloudReadConfiguration`	GET	Configure the GCP backend.
Google cloud read impersonated account`googleCloudReadImpersonatedAccount`	GET	Register and manage a GCP service account to generate credentials under
Google cloud read roleset`googleCloudReadRoleset`	GET	Read/write sets of IAM roles to be given to generated credentials for specified GCP resources.
Google cloud read static account`googleCloudReadStaticAccount`	GET	Register and manage a GCP service account to generate credentials under
Google cloud rotate roleset`googleCloudRotateRoleset`	POST	Rotates or recreates the service account bound to a roleset.
Google cloud rotate roleset key`googleCloudRotateRolesetKey`	POST	Rotate the service account key used to generate access tokens for a roleset.
Google cloud rotate root credentials secrets`googleCloudRotateRootCredentialsSecrets`	POST	Request to rotate the GCP credentials used by Vault
Google cloud rotate static account key`googleCloudRotateStaticAccountKey`	POST	Rotate the key used to generate access tokens for a static account
Google cloud write impersonated account`googleCloudWriteImpersonatedAccount`	POST	Register and manage a GCP service account to generate credentials under
Google cloud write roleset`googleCloudWriteRoleset`	POST	Read/write sets of IAM roles to be given to generated credentials for specified GCP resources.
Google cloud write static account`googleCloudWriteStaticAccount`	POST	Register and manage a GCP service account to generate credentials under

Identity111

Alias create`aliasCreate`	POST	Create a new alias.
Alias delete by ID`aliasDeleteById`	DELETE	Update, read or delete an alias ID.
Alias list by ID`aliasListById`	GET	List all the alias IDs.
Alias read by ID`aliasReadById`	GET	Update, read or delete an alias ID.
Alias update by ID`aliasUpdateById`	POST	Update, read or delete an alias ID.
Create or update a login enforcement`mfaWriteLoginEnforcement`	POST	Create or update a login enforcement
Delete a login enforcement`mfaDeleteLoginEnforcement`	DELETE	Delete a login enforcement
Destroys a TOTP secret for the given MFA method ID on the given entity`mfaAdminDestroyTotpSecret`	POST	Destroys a TOTP secret for the given MFA method ID on the given entity
Entity batch delete`entityBatchDelete`	POST	Delete all of the entities provided
Entity create`entityCreate`	POST	Create a new entity
Entity create alias`entityCreateAlias`	POST	Create a new alias.
Entity delete alias by ID`entityDeleteAliasById`	DELETE	Update, read or delete an alias ID.
Entity delete by ID`entityDeleteById`	DELETE	Update, read or delete an entity using entity ID
Entity delete by name`entityDeleteByName`	DELETE	Update, read or delete an entity using entity name
Entity list aliases by ID`entityListAliasesById`	GET	List all the alias IDs.
Entity list by ID`entityListById`	GET	List all the entity IDs
Entity list by name`entityListByName`	GET	List all the entity names
Entity merge`entityMerge`	POST	Merge two or more entities together
Entity read alias by ID`entityReadAliasById`	GET	Update, read or delete an alias ID.
Entity read by ID`entityReadById`	GET	Update, read or delete an entity using entity ID
Entity read by name`entityReadByName`	GET	Update, read or delete an entity using entity name
Entity update alias by ID`entityUpdateAliasById`	POST	Update, read or delete an alias ID.
Entity update by ID`entityUpdateById`	POST	Update, read or delete an entity using entity ID
Entity update by name`entityUpdateByName`	POST	Update, read or delete an entity using entity name
Generate an OIDC token`oidcGenerateToken`	GET	Generate an OIDC token
Group create`groupCreate`	POST	Create a new group.
Group create alias`groupCreateAlias`	POST	Creates a new group alias, or updates an existing one.
Group delete alias by ID`groupDeleteAliasById`	DELETE	Vault DELETE /identity/group-alias/id/{id}.
Group delete by ID`groupDeleteById`	DELETE	Update or delete an existing group using its ID.
Group delete by name`groupDeleteByName`	DELETE	Vault DELETE /identity/group/name/{name}.
Group list by name`groupListByName`	GET	Vault GET /identity/group/name/.
Group read alias by ID`groupReadAliasById`	GET	Vault GET /identity/group-alias/id/{id}.
Group read by ID`groupReadById`	GET	Update or delete an existing group using its ID.
Group read by name`groupReadByName`	GET	Vault GET /identity/group/name/{name}.
Group update alias by ID`groupUpdateAliasById`	POST	Vault POST /identity/group-alias/id/{id}.
Group update by ID`groupUpdateById`	POST	Update or delete an existing group using its ID.
Group update by name`groupUpdateByName`	POST	Vault POST /identity/group/name/{name}.
List all the group alias IDs`groupListAliasesById`	GET	List all the group alias IDs.
List all the group IDs`groupListById`	GET	List all the group IDs.
List configured OIDC roles`oidcListRoles`	GET	List configured OIDC roles
List login enforcements`mfaListLoginEnforcements`	GET	List login enforcements
List MFA method configurations for all MFA methods`mfaListMethods`	GET	List MFA method configurations for all MFA methods
List OIDC keys`oidcListKeys`	GET	List OIDC keys
MFA admin generate TOTP secret`mfaAdminGenerateTotpSecret`	POST	Update or create TOTP secret for the given method ID on the given entity.
MFA create duo method`mfaCreateDuoMethod`	POST	Create the given MFA method
MFA create okta method`mfaCreateOktaMethod`	POST	Create the given MFA method
MFA create ping ID method`mfaCreatePingIdMethod`	POST	Create the given MFA method
MFA create TOTP method`mfaCreateTotpMethod`	POST	Create the given MFA method
MFA delete duo method`mfaDeleteDuoMethod`	DELETE	Delete the given MFA method
MFA delete okta method`mfaDeleteOktaMethod`	DELETE	Delete the given MFA method
MFA delete ping ID method`mfaDeletePingIdMethod`	DELETE	Delete the given MFA method
MFA delete TOTP method`mfaDeleteTotpMethod`	DELETE	Delete the given MFA method
MFA generate TOTP secret`mfaGenerateTotpSecret`	POST	Update or create TOTP secret for the given method ID on the given entity.
MFA list duo methods`mfaListDuoMethods`	GET	List MFA method configurations for the given MFA method
MFA list okta methods`mfaListOktaMethods`	GET	List MFA method configurations for the given MFA method
MFA list ping ID methods`mfaListPingIdMethods`	GET	List MFA method configurations for the given MFA method
MFA list TOTP methods`mfaListTotpMethods`	GET	List MFA method configurations for the given MFA method
MFA read duo method`mfaReadDuoMethod`	GET	Read the current configuration for the given MFA method
MFA read okta method`mfaReadOktaMethod`	GET	Read the current configuration for the given MFA method
MFA read ping ID method`mfaReadPingIdMethod`	GET	Read the current configuration for the given MFA method
MFA read TOTP method`mfaReadTotpMethod`	GET	Read the current configuration for the given MFA method
MFA update duo method`mfaUpdateDuoMethod`	POST	Update the configuration for the given MFA method
MFA update okta method`mfaUpdateOktaMethod`	POST	Update the configuration for the given MFA method
MFA update ping ID method`mfaUpdatePingIdMethod`	POST	Update the configuration for the given MFA method
MFA update TOTP method`mfaUpdateTotpMethod`	POST	Update the configuration for the given MFA method
OIDC configure`oidcConfigure`	POST	OIDC configuration
OIDC delete assignment`oidcDeleteAssignment`	DELETE	CRUD operations for OIDC assignments.
OIDC delete client`oidcDeleteClient`	DELETE	CRUD operations for OIDC clients.
OIDC delete key`oidcDeleteKey`	DELETE	CRUD operations for OIDC keys.
OIDC delete provider`oidcDeleteProvider`	DELETE	CRUD operations for OIDC providers.
OIDC delete role`oidcDeleteRole`	DELETE	CRUD operations on OIDC Roles
OIDC delete scope`oidcDeleteScope`	DELETE	CRUD operations for OIDC scopes.
OIDC list assignments`oidcListAssignments`	GET	List OIDC assignments
OIDC list clients`oidcListClients`	GET	List OIDC clients
OIDC list providers`oidcListProviders`	GET	List OIDC providers
OIDC list scopes`oidcListScopes`	GET	List OIDC scopes
OIDC provider authorize`oidcProviderAuthorize`	GET	Provides the OIDC Authorization Endpoint.
OIDC provider authorize with parameters`oidcProviderAuthorizeWithParameters`	POST	Provides the OIDC Authorization Endpoint.
OIDC provider token`oidcProviderToken`	POST	Provides the OIDC Token Endpoint.
OIDC provider user info`oidcProviderUserInfo`	GET	Provides the OIDC UserInfo Endpoint.
OIDC provider user info2`oidcProviderUserInfo2`	POST	Provides the OIDC UserInfo Endpoint.
OIDC read assignment`oidcReadAssignment`	GET	CRUD operations for OIDC assignments.
OIDC read client`oidcReadClient`	GET	CRUD operations for OIDC clients.
OIDC read configuration`oidcReadConfiguration`	GET	OIDC configuration
OIDC read key`oidcReadKey`	GET	CRUD operations for OIDC keys.
OIDC read OIDC child well known keys`oidcReadOidcChildWellKnownKeys`	GET	Retrieve public keys
OIDC read OIDC child well known openid configuration`oidcReadOidcChildWellKnownOpenidConfiguration`	GET	Query OIDC configurations
OIDC read open ID configuration`oidcReadOpenIdConfiguration`	GET	Query OIDC configurations
OIDC read provider`oidcReadProvider`	GET	CRUD operations for OIDC providers.
OIDC read provider open ID configuration`oidcReadProviderOpenIdConfiguration`	GET	Query OIDC configurations
OIDC read provider public keys`oidcReadProviderPublicKeys`	GET	Retrieve public keys
OIDC read public keys`oidcReadPublicKeys`	GET	Retrieve public keys
OIDC read role`oidcReadRole`	GET	CRUD operations on OIDC Roles
OIDC read scope`oidcReadScope`	GET	CRUD operations for OIDC scopes.
OIDC write assignment`oidcWriteAssignment`	POST	CRUD operations for OIDC assignments.
OIDC write client`oidcWriteClient`	POST	CRUD operations for OIDC clients.
OIDC write key`oidcWriteKey`	POST	CRUD operations for OIDC keys.
OIDC write provider`oidcWriteProvider`	POST	CRUD operations for OIDC providers.
OIDC write role`oidcWriteRole`	POST	CRUD operations on OIDC Roles
OIDC write scope`oidcWriteScope`	POST	CRUD operations for OIDC scopes.
Persona create`personaCreate`	POST	Create a new alias.
Persona delete by ID`personaDeleteById`	DELETE	Update, read or delete an alias ID.
Persona list by ID`personaListById`	GET	List all the alias IDs.
Persona read by ID`personaReadById`	GET	Update, read or delete an alias ID.
Persona update by ID`personaUpdateById`	POST	Update, read or delete an alias ID.
Query entities based on various properties`entityLookUp`	POST	Query entities based on various properties.
Query groups based on various properties`groupLookUp`	POST	Query groups based on various properties.
Read the current configuration for the given ID regardless of the MFA method type`mfaReadMethod`	GET	Read the current configuration for the given ID regardless of the MFA method type
Read the current login enforcement`mfaReadLoginEnforcement`	GET	Read the current login enforcement
Rotate a named OIDC key`oidcRotateKey`	POST	Rotate a named OIDC key.
Verify the authenticity of an OIDC token`oidcIntrospect`	POST	Verify the authenticity of an OIDC token

JWT and OIDC auth10

Authenticates to Vault using a JWT (or OIDC) token`jwtLogin`	POST	Authenticates to Vault using a JWT (or OIDC) token.
Callback endpoint to complete an OIDC login`jwtOidcCallback`	GET	Callback endpoint to complete an OIDC login.
Callback endpoint to handle form_posts`jwtOidcCallbackFormPost`	POST	Callback endpoint to handle form posts.
Configure the JWT authentication backend`jwtConfigure`	POST	Configure the JWT authentication backend.
Delete an existing role`jwtDeleteRole`	DELETE	Delete an existing role.
JWT list roles`jwtListRoles`	GET	Lists all the roles registered with the backend.
JWT write role`jwtWriteRole`	POST	Register an role with the backend.
Read an existing role`jwtReadRole`	GET	Read an existing role.
Read the current JWT authentication backend configuration`jwtReadConfiguration`	GET	Read the current JWT authentication backend configuration.
Request an authorization URL to start an OIDC login flow`jwtOidcRequestAuthorizationUrl`	POST	Request an authorization URL to start an OIDC login flow.

Kerberos auth10

Kerberos configure`kerberosConfigure`	POST	Configures the Kerberos keytab and service account.
Kerberos configure LDAP`kerberosConfigureLdap`	POST	Configure the LDAP server to connect to, along with its options.
Kerberos delete group`kerberosDeleteGroup`	DELETE	Manage users allowed to authenticate.
Kerberos list groups`kerberosListGroups`	GET	Manage users allowed to authenticate.
Kerberos login`kerberosLogin`	POST	Vault POST /auth/{kerberos mount path}/login.
Kerberos login2`kerberosLogin2`	GET	Vault GET /auth/{kerberos mount path}/login.
Kerberos read configuration`kerberosReadConfiguration`	GET	Configures the Kerberos keytab and service account.
Kerberos read group`kerberosReadGroup`	GET	Manage users allowed to authenticate.
Kerberos read LDAP configuration`kerberosReadLdapConfiguration`	GET	Configure the LDAP server to connect to, along with its options.
Kerberos write group`kerberosWriteGroup`	POST	Manage users allowed to authenticate.

Kubernetes auth7

Authenticates Kubernetes service accounts with Vault`kubernetesLogin`	POST	Authenticates Kubernetes service accounts with Vault.
Kubernetes configure auth`kubernetesConfigureAuth`	POST	Configures the JWT Public Key and Kubernetes API information.
Kubernetes delete auth role`kubernetesDeleteAuthRole`	DELETE	Register an role with the backend.
Kubernetes list auth roles`kubernetesListAuthRoles`	GET	Lists all the roles registered with the backend.
Kubernetes read auth configuration`kubernetesReadAuthConfiguration`	GET	Configures the JWT Public Key and Kubernetes API information.
Kubernetes read auth role`kubernetesReadAuthRole`	GET	Register an role with the backend.
Kubernetes write auth role`kubernetesWriteAuthRole`	POST	Register an role with the backend.

Kubernetes secrets9

Kubernetes check configuration`kubernetesCheckConfiguration`	GET	Checks the Kubernetes configuration is valid.
Kubernetes configure`kubernetesConfigure`	POST	Configure the Kubernetes secret engine plugin.
Kubernetes delete configuration`kubernetesDeleteConfiguration`	DELETE	Configure the Kubernetes secret engine plugin.
Kubernetes delete role`kubernetesDeleteRole`	DELETE	Manage the roles that can be created with this secrets engine.
Kubernetes generate credentials`kubernetesGenerateCredentials`	POST	Request Kubernetes service account credentials for a given Vault role.
Kubernetes list roles`kubernetesListRoles`	GET	List the existing roles in this secrets engine.
Kubernetes read configuration`kubernetesReadConfiguration`	GET	Configure the Kubernetes secret engine plugin.
Kubernetes read role`kubernetesReadRole`	GET	Manage the roles that can be created with this secrets engine.
Kubernetes write role`kubernetesWriteRole`	POST	Manage the roles that can be created with this secrets engine.

KV version 1 secrets4

KV v1 delete`kvV1Delete`	DELETE	Pass-through secret storage to the storage backend, allowing you to read/write arbitrary data into secret storage.
KV v1 list`kvV1List`	GET	Pass-through secret storage to the storage backend, allowing you to read/write arbitrary data into secret storage.
KV v1 read`kvV1Read`	GET	Pass-through secret storage to the storage backend, allowing you to read/write arbitrary data into secret storage.
KV v1 write`kvV1Write`	POST	Pass-through secret storage to the storage backend, allowing you to read/write arbitrary data into secret storage.

KV version 2 secrets15

Configure backend level settings that are applied to every key in the key-value store`kvV2Configure`	POST	Configure backend level settings that are applied to every key in the key-value store.
KV v2 delete`kvV2Delete`	DELETE	Write, Patch, Read, and Delete data in the Key-Value Store.
KV v2 delete metadata and all versions`kvV2DeleteMetadataAndAllVersions`	DELETE	Configures settings for the KV store
KV v2 delete versions`kvV2DeleteVersions`	POST	Marks one or more versions as deleted in the KV store.
KV v2 destroy versions`kvV2DestroyVersions`	POST	Permanently removes one or more versions in the KV store
KV v2 list`kvV2List`	GET	Configures settings for the KV store
KV v2 patch`kvV2Patch`	PATCH	Write, Patch, Read, and Delete data in the Key-Value Store.
KV v2 patch metadata path`kvV2PatchMetadataPath`	PATCH	Configures settings for the KV store
KV v2 read`kvV2Read`	GET	Write, Patch, Read, and Delete data in the Key-Value Store.
KV v2 read metadata`kvV2ReadMetadata`	GET	Configures settings for the KV store
KV v2 read subkeys`kvV2ReadSubkeys`	GET	Read the structure of a secret entry from the Key-Value store with the values removed.
KV v2 undelete versions`kvV2UndeleteVersions`	POST	Undeletes one or more versions from the KV store.
KV v2 write`kvV2Write`	POST	Write, Patch, Read, and Delete data in the Key-Value Store.
KV v2 write metadata`kvV2WriteMetadata`	POST	Configures settings for the KV store
Read the backend level settings`kvV2ReadConfiguration`	GET	Read the backend level settings.

LDAP auth12

LDAP configure auth`ldapConfigureAuth`	POST	Configure the LDAP server to connect to, along with its options.
LDAP delete group`ldapDeleteGroup`	DELETE	Manage additional groups for users allowed to authenticate.
LDAP delete user`ldapDeleteUser`	DELETE	Manage users allowed to authenticate.
LDAP list groups`ldapListGroups`	GET	Manage additional groups for users allowed to authenticate.
LDAP list users`ldapListUsers`	GET	Manage users allowed to authenticate.
LDAP login`ldapLogin`	POST	Log in with a username and password.
LDAP read auth configuration`ldapReadAuthConfiguration`	GET	Configure the LDAP server to connect to, along with its options.
LDAP read group`ldapReadGroup`	GET	Manage additional groups for users allowed to authenticate.
LDAP read user`ldapReadUser`	GET	Manage users allowed to authenticate.
LDAP rotate root credentials auth`ldapRotateRootCredentialsAuth`	POST	Request to rotate the LDAP credentials used by Vault
LDAP write group`ldapWriteGroup`	POST	Manage additional groups for users allowed to authenticate.
LDAP write user`ldapWriteUser`	POST	Manage users allowed to authenticate.

LDAP secrets32

Check a service account out from the library`ldapLibraryCheckOut`	POST	Check a service account out from the library.
Check the status of the service accounts in a library set`ldapLibraryCheckStatus`	GET	Check the status of the service accounts in a library set.
Delete a library set`ldapLibraryDelete`	DELETE	Delete a library set.
LDAP configure`ldapConfigure`	POST	Configure the LDAP secrets engine plugin.
LDAP delete configuration`ldapDeleteConfiguration`	DELETE	Configure the LDAP secrets engine plugin.
LDAP delete dynamic role`ldapDeleteDynamicRole`	DELETE	Manage the static roles that can be created with this backend.
LDAP delete static role`ldapDeleteStaticRole`	DELETE	Manage the static roles that can be created with this backend.
LDAP library check in`ldapLibraryCheckIn`	POST	Check service accounts in to the library.
LDAP library force check in`ldapLibraryForceCheckIn`	POST	Check service accounts in to the library.
LDAP library list`ldapLibraryList`	GET	List the name of each set of service accounts currently stored.
LDAP library list library path folder`ldapLibraryListLibraryPathFolder`	GET	List the name of each set of service accounts currently stored.
LDAP library list library path prefix`ldapLibraryListLibraryPathPrefix`	GET	List the name of each set of service accounts currently stored.
LDAP list dynamic roles`ldapListDynamicRoles`	GET	List all the dynamic roles Vault is currently managing in LDAP.
LDAP list role path folder`ldapListRolePathFolder`	GET	List all the dynamic roles Vault is currently managing in LDAP.
LDAP list role path prefix`ldapListRolePathPrefix`	GET	List all the dynamic roles Vault is currently managing in LDAP.
LDAP list static role path folder`ldapListStaticRolePathFolder`	GET	This path lists all the static roles Vault is currently managing within the LDAP system.
LDAP list static role path prefix`ldapListStaticRolePathPrefix`	GET	This path lists all the static roles Vault is currently managing within the LDAP system.
LDAP list static roles`ldapListStaticRoles`	GET	This path lists all the static roles Vault is currently managing within the LDAP system.
LDAP read configuration`ldapReadConfiguration`	GET	Configure the LDAP secrets engine plugin.
LDAP read dynamic role`ldapReadDynamicRole`	GET	Manage the static roles that can be created with this backend.
LDAP read static role`ldapReadStaticRole`	GET	Manage the static roles that can be created with this backend.
LDAP request dynamic role credentials`ldapRequestDynamicRoleCredentials`	GET	Request LDAP credentials for a dynamic role.
LDAP request static role credentials`ldapRequestStaticRoleCredentials`	GET	Request LDAP credentials for a certain static role.
LDAP rotate root credentials secrets`ldapRotateRootCredentialsSecrets`	POST	Request to rotate the root credentials Vault uses for the LDAP administrator account.
LDAP rotate static role`ldapRotateStaticRole`	POST	Request to rotate the credentials for a static user account.
LDAP write dynamic role`ldapWriteDynamicRole`	POST	Manage the static roles that can be created with this backend.
LDAP write static role`ldapWriteStaticRole`	POST	Manage the static roles that can be created with this backend.
Read a library set`ldapLibraryRead`	GET	Read a library set.
Read the total count of dynamic roles`ldapReadRoleCount`	GET	Read the total count of dynamic roles
Read the total count of library sets`ldapLibraryReadCount`	GET	Read the total count of library sets
Read the total count of static roles`ldapReadStaticRoleCount`	GET	Read the total count of static roles
Update a library set`ldapLibraryConfigure`	POST	Update a library set.

MongoDB Atlas secrets8

Mongo db atlas configure`mongoDbAtlasConfigure`	POST	Configure the credentials that are used to manage Database Users.
Mongo db atlas delete role`mongoDbAtlasDeleteRole`	DELETE	Manage the roles used to generate MongoDB Atlas Programmatic API Keys.
Mongo db atlas generate credentials`mongoDbAtlasGenerateCredentials`	GET	Generate MongoDB Atlas Programmatic API from a specific Vault role.
Mongo db atlas generate credentials2`mongoDbAtlasGenerateCredentials2`	POST	Generate MongoDB Atlas Programmatic API from a specific Vault role.
Mongo db atlas list roles`mongoDbAtlasListRoles`	GET	List the existing roles in this backend
Mongo db atlas read configuration`mongoDbAtlasReadConfiguration`	GET	Configure the credentials that are used to manage Database Users.
Mongo db atlas read role`mongoDbAtlasReadRole`	GET	Manage the roles used to generate MongoDB Atlas Programmatic API Keys.
Mongo db atlas write role`mongoDbAtlasWriteRole`	POST	Manage the roles used to generate MongoDB Atlas Programmatic API Keys.

Nomad secrets11

Nomad configure access`nomadConfigureAccess`	POST	Vault POST /{nomad mount path}/config/access.
Nomad configure lease`nomadConfigureLease`	POST	Configure the lease parameters for generated tokens
Nomad delete access configuration`nomadDeleteAccessConfiguration`	DELETE	Vault DELETE /{nomad mount path}/config/access.
Nomad delete lease configuration`nomadDeleteLeaseConfiguration`	DELETE	Configure the lease parameters for generated tokens
Nomad delete role`nomadDeleteRole`	DELETE	Vault DELETE /{nomad mount path}/role/{name}.
Nomad generate credentials`nomadGenerateCredentials`	GET	Vault GET /{nomad mount path}/creds/{name}.
Nomad list roles`nomadListRoles`	GET	Vault GET /{nomad mount path}/role/.
Nomad read access configuration`nomadReadAccessConfiguration`	GET	Vault GET /{nomad mount path}/config/access.
Nomad read lease configuration`nomadReadLeaseConfiguration`	GET	Configure the lease parameters for generated tokens
Nomad read role`nomadReadRole`	GET	Vault GET /{nomad mount path}/role/{name}.
Nomad write role`nomadWriteRole`	POST	Vault POST /{nomad mount path}/role/{name}.

Okta auth12

Okta configure`oktaConfigure`	POST	This endpoint allows you to configure the Okta and its configuration options.
Okta delete group`oktaDeleteGroup`	DELETE	Manage users allowed to authenticate.
Okta delete user`oktaDeleteUser`	DELETE	Manage additional groups for users allowed to authenticate.
Okta list groups`oktaListGroups`	GET	Manage users allowed to authenticate.
Okta list users`oktaListUsers`	GET	Manage additional groups for users allowed to authenticate.
Okta login`oktaLogin`	POST	Log in with a username and password.
Okta read configuration`oktaReadConfiguration`	GET	This endpoint allows you to configure the Okta and its configuration options.
Okta read group`oktaReadGroup`	GET	Manage users allowed to authenticate.
Okta read user`oktaReadUser`	GET	Manage additional groups for users allowed to authenticate.
Okta verify`oktaVerify`	GET	Vault GET /auth/{okta mount path}/verify/{nonce}.
Okta write group`oktaWriteGroup`	POST	Manage users allowed to authenticate.
Okta write user`oktaWriteUser`	POST	Manage additional groups for users allowed to authenticate.

Oracle Cloud auth8

Authenticates to Vault using OCI credentials`ociLogin`	POST	Authenticates to Vault using OCI credentials
OCI configure`ociConfigure`	POST	Manages the configuration for the Vault Auth Plugin.
OCI delete configuration`ociDeleteConfiguration`	DELETE	Manages the configuration for the Vault Auth Plugin.
OCI delete role`ociDeleteRole`	DELETE	Create a role and associate policies to it.
OCI list roles`ociListRoles`	GET	Lists all the roles that are registered with Vault.
OCI read configuration`ociReadConfiguration`	GET	Manages the configuration for the Vault Auth Plugin.
OCI read role`ociReadRole`	GET	Create a role and associate policies to it.
OCI write role`ociWriteRole`	POST	Create a role and associate policies to it.

PKI secrets149

PKI configure ACME`pkiConfigureAcme`	POST	Configuration of ACME Endpoints
PKI configure auto tidy`pkiConfigureAutoTidy`	POST	Modifies the current configuration for automatic tidy execution.
PKI configure CA`pkiConfigureCa`	POST	Set the CA certificate and private key used for generated credentials.
PKI configure cluster`pkiConfigureCluster`	POST	Set cluster-local configuration, including address to this PR cluster.
PKI configure CRL`pkiConfigureCrl`	POST	Configure the CRL expiration.
PKI configure issuers`pkiConfigureIssuers`	POST	Read and set the default issuer certificate for signing.
PKI configure keys`pkiConfigureKeys`	POST	Read and set the default key used for signing
PKI configure urls`pkiConfigureUrls`	POST	Set the URLs for the issuing CA, CRL distribution points, and OCSP servers.
PKI cross sign intermediate`pkiCrossSignIntermediate`	POST	Generate a new CSR and private key used for signing.
PKI delete eab key`pkiDeleteEabKey`	DELETE	Delete an external account binding id prior to its use within an ACME account
PKI delete issuer`pkiDeleteIssuer`	DELETE	Fetch a single issuer certificate.
PKI delete key`pkiDeleteKey`	DELETE	Fetch a single issuer key
PKI delete role`pkiDeleteRole`	DELETE	Manage the roles that can be created with this backend.
PKI delete root`pkiDeleteRoot`	DELETE	Deletes the root CA key to allow a new one to be generated.
PKI generate eab key`pkiGenerateEabKey`	POST	Generate external account bindings to be used for ACME
PKI generate eab key for issuer`pkiGenerateEabKeyForIssuer`	POST	Generate external account bindings to be used for ACME
PKI generate eab key for issuer and role`pkiGenerateEabKeyForIssuerAndRole`	POST	Generate external account bindings to be used for ACME
PKI generate eab key for role`pkiGenerateEabKeyForRole`	POST	Generate external account bindings to be used for ACME
PKI generate exported key`pkiGenerateExportedKey`	POST	Generate a new private key used for signing.
PKI generate intermediate`pkiGenerateIntermediate`	POST	Generate a new CSR and private key used for signing.
PKI generate internal key`pkiGenerateInternalKey`	POST	Generate a new private key used for signing.
PKI generate KMS key`pkiGenerateKmsKey`	POST	Generate a new private key used for signing.
PKI generate root`pkiGenerateRoot`	POST	Generate a new CA certificate and private key used for signing.
PKI import key`pkiImportKey`	POST	Import the specified key.
PKI issue with role`pkiIssueWithRole`	POST	Request a certificate using a certain role with the provided details.
PKI issuer issue with role`pkiIssuerIssueWithRole`	POST	Request a certificate using a certain role with the provided details.
PKI issuer read CRL`pkiIssuerReadCrl`	GET	Fetch an issuer's Certificate Revocation Log (CRL).
PKI issuer read CRL delta`pkiIssuerReadCrlDelta`	GET	Fetch an issuer's Certificate Revocation Log (CRL).
PKI issuer read CRL delta DER`pkiIssuerReadCrlDeltaDer`	GET	Fetch an issuer's Certificate Revocation Log (CRL).
PKI issuer read CRL delta PEM`pkiIssuerReadCrlDeltaPem`	GET	Fetch an issuer's Certificate Revocation Log (CRL).
PKI issuer read CRL DER`pkiIssuerReadCrlDer`	GET	Fetch an issuer's Certificate Revocation Log (CRL).
PKI issuer read CRL PEM`pkiIssuerReadCrlPem`	GET	Fetch an issuer's Certificate Revocation Log (CRL).
PKI issuer resign crls`pkiIssuerResignCrls`	POST	Combine and sign with the provided issuer different CRLs
PKI issuer sign intermediate`pkiIssuerSignIntermediate`	POST	Issue an intermediate CA certificate based on the provided CSR.
PKI issuer sign revocation list`pkiIssuerSignRevocationList`	POST	Generate and sign a CRL based on the provided parameters.
PKI issuer sign self issued`pkiIssuerSignSelfIssued`	POST	Re-issue a self-signed certificate based on the provided certificate.
PKI issuer sign verbatim`pkiIssuerSignVerbatim`	POST	Issue a certificate directly based on the provided CSR.
PKI issuer sign verbatim with role`pkiIssuerSignVerbatimWithRole`	POST	Issue a certificate directly based on the provided CSR.
PKI issuer sign with role`pkiIssuerSignWithRole`	POST	Request certificates using a certain role with the provided details.
PKI issuers generate intermediate`pkiIssuersGenerateIntermediate`	POST	Generate a new CSR and private key used for signing.
PKI issuers generate root`pkiIssuersGenerateRoot`	POST	Generate a new CA certificate and private key used for signing.
PKI issuers import bundle`pkiIssuersImportBundle`	POST	Import the specified issuing certificates.
PKI issuers import cert`pkiIssuersImportCert`	POST	Import the specified issuing certificates.
PKI list ACME account keys`pkiListAcmeAccountKeys`	GET	List all ACME account key identifiers.
PKI list certs`pkiListCerts`	GET	Fetch a CA, CRL, CA Chain, or non-revoked certificate.
PKI list eab keys`pkiListEabKeys`	GET	list external account bindings to be used for ACME
PKI list issuers`pkiListIssuers`	GET	Fetch a list of CA certificates.
PKI list keys`pkiListKeys`	GET	Fetch a list of all issuer keys
PKI list revoked certs`pkiListRevokedCerts`	GET	List all revoked serial numbers within the local cluster
PKI list roles`pkiListRoles`	GET	List the existing roles in this backend
PKI patch issuer`pkiPatchIssuer`	PATCH	Fetch a single issuer certificate.
PKI patch role`pkiPatchRole`	PATCH	Manage the roles that can be created with this backend.
PKI query OCSP`pkiQueryOcsp`	POST	Query a certificate's revocation status through OCSP'
PKI query OCSP with get req`pkiQueryOcspWithGetReq`	GET	Query a certificate's revocation status through OCSP'
PKI read ACME configuration`pkiReadAcmeConfiguration`	GET	Configuration of ACME Endpoints
PKI read ACME directory`pkiReadAcmeDirectory`	GET
PKI read ACME key ID`pkiReadAcmeKeyId`	GET	Fetch the details or update the status of an ACME account by key identifier.
PKI read ACME new nonce`pkiReadAcmeNewNonce`	GET
PKI read auto tidy configuration`pkiReadAutoTidyConfiguration`	GET	Modifies the current configuration for automatic tidy execution.
PKI read CA chain PEM`pkiReadCaChainPem`	GET	Fetch a CA, CRL, CA Chain, or non-revoked certificate.
PKI read CA DER`pkiReadCaDer`	GET	Fetch a CA, CRL, CA Chain, or non-revoked certificate.
PKI read CA PEM`pkiReadCaPem`	GET	Fetch a CA, CRL, CA Chain, or non-revoked certificate.
PKI read cert`pkiReadCert`	GET	Fetch a CA, CRL, CA Chain, or non-revoked certificate.
PKI read cert CA chain`pkiReadCertCaChain`	GET	Fetch a CA, CRL, CA Chain, or non-revoked certificate.
PKI read cert CRL`pkiReadCertCrl`	GET	Fetch a CA, CRL, CA Chain, or non-revoked certificate.
PKI read cert delta CRL`pkiReadCertDeltaCrl`	GET	Fetch a CA, CRL, CA Chain, or non-revoked certificate.
PKI read cert raw DER`pkiReadCertRawDer`	GET	Fetch a CA, CRL, CA Chain, or non-revoked certificate.
PKI read cert raw PEM`pkiReadCertRawPem`	GET	Fetch a CA, CRL, CA Chain, or non-revoked certificate.
PKI read cluster configuration`pkiReadClusterConfiguration`	GET	Set cluster-local configuration, including address to this PR cluster.
PKI read CRL configuration`pkiReadCrlConfiguration`	GET	Configure the CRL expiration.
PKI read CRL delta`pkiReadCrlDelta`	GET	Fetch a CA, CRL, CA Chain, or non-revoked certificate.
PKI read CRL delta PEM`pkiReadCrlDeltaPem`	GET	Fetch a CA, CRL, CA Chain, or non-revoked certificate.
PKI read CRL DER`pkiReadCrlDer`	GET	Fetch a CA, CRL, CA Chain, or non-revoked certificate.
PKI read CRL PEM`pkiReadCrlPem`	GET	Fetch a CA, CRL, CA Chain, or non-revoked certificate.
PKI read issuer`pkiReadIssuer`	GET	Fetch a single issuer certificate.
PKI read issuer DER`pkiReadIssuerDer`	GET	Fetch a single issuer certificate.
PKI read issuer issuer ref ACME directory`pkiReadIssuerIssuerRefAcmeDirectory`	GET
PKI read issuer issuer ref ACME new nonce`pkiReadIssuerIssuerRefAcmeNewNonce`	GET
PKI read issuer issuer ref roles role ACME directory`pkiReadIssuerIssuerRefRolesRoleAcmeDirectory`	GET
PKI read issuer issuer ref roles role ACME new nonce`pkiReadIssuerIssuerRefRolesRoleAcmeNewNonce`	GET
PKI read issuer json`pkiReadIssuerJson`	GET	Fetch a single issuer certificate.
PKI read issuer PEM`pkiReadIssuerPem`	GET	Fetch a single issuer certificate.
PKI read issuers configuration`pkiReadIssuersConfiguration`	GET	Read and set the default issuer certificate for signing.
PKI read key`pkiReadKey`	GET	Fetch a single issuer key
PKI read keys configuration`pkiReadKeysConfiguration`	GET	Read and set the default key used for signing
PKI read role`pkiReadRole`	GET	Manage the roles that can be created with this backend.
PKI read roles role ACME directory`pkiReadRolesRoleAcmeDirectory`	GET
PKI read roles role ACME new nonce`pkiReadRolesRoleAcmeNewNonce`	GET
PKI read urls configuration`pkiReadUrlsConfiguration`	GET	Set the URLs for the issuing CA, CRL distribution points, and OCSP servers.
PKI replace root`pkiReplaceRoot`	POST	Read and set the default issuer certificate for signing.
PKI revoke`pkiRevoke`	POST	Revoke a certificate by serial number or with explicit certificate.
PKI revoke issuer`pkiRevokeIssuer`	POST	Revoke the specified issuer certificate.
PKI revoke with key`pkiRevokeWithKey`	POST	Revoke a certificate by serial number or with explicit certificate.
PKI root sign intermediate`pkiRootSignIntermediate`	POST	Issue an intermediate CA certificate based on the provided CSR.
PKI root sign self issued`pkiRootSignSelfIssued`	POST	Re-issue a self-signed certificate based on the provided certificate.
PKI rotate CRL`pkiRotateCrl`	GET	Force a rebuild of the CRL.
PKI rotate delta CRL`pkiRotateDeltaCrl`	GET	Force a rebuild of the delta CRL.
PKI rotate root`pkiRotateRoot`	POST	Generate a new CA certificate and private key used for signing.
PKI set signed intermediate`pkiSetSignedIntermediate`	POST	Provide the signed intermediate CA cert.
PKI sign verbatim`pkiSignVerbatim`	POST	Issue a certificate directly based on the provided CSR.
PKI sign verbatim with role`pkiSignVerbatimWithRole`	POST	Issue a certificate directly based on the provided CSR.
PKI sign with role`pkiSignWithRole`	POST	Request certificates using a certain role with the provided details.
PKI tidy`pkiTidy`	POST	Tidy up the backend by removing expired certificates, revocation information, or both.
PKI tidy cancel`pkiTidyCancel`	POST	Cancels a currently running tidy operation.
PKI tidy status`pkiTidyStatus`	GET	Returns the status of the tidy operation.
PKI write ACME account kid`pkiWriteAcmeAccountKid`	POST
PKI write ACME authorization auth ID`pkiWriteAcmeAuthorizationAuthId`	POST
PKI write ACME challenge auth ID challenge type`pkiWriteAcmeChallengeAuthIdChallengeType`	POST
PKI write ACME key ID`pkiWriteAcmeKeyId`	POST	Fetch the details or update the status of an ACME account by key identifier.
PKI write ACME new account`pkiWriteAcmeNewAccount`	POST
PKI write ACME new order`pkiWriteAcmeNewOrder`	POST
PKI write ACME order order ID`pkiWriteAcmeOrderOrderId`	POST
PKI write ACME order order ID cert`pkiWriteAcmeOrderOrderIdCert`	POST
PKI write ACME order order ID finalize`pkiWriteAcmeOrderOrderIdFinalize`	POST
PKI write ACME orders`pkiWriteAcmeOrders`	POST
PKI write ACME revoke cert`pkiWriteAcmeRevokeCert`	POST
PKI write issuer`pkiWriteIssuer`	POST	Fetch a single issuer certificate.
PKI write issuer issuer ref ACME account kid`pkiWriteIssuerIssuerRefAcmeAccountKid`	POST
PKI write issuer issuer ref ACME authorization auth ID`pkiWriteIssuerIssuerRefAcmeAuthorizationAuthId`	POST
PKI write issuer issuer ref ACME challenge auth ID challenge type`pkiWriteIssuerIssuerRefAcmeChallengeAuthIdChallengeType`	POST
PKI write issuer issuer ref ACME new account`pkiWriteIssuerIssuerRefAcmeNewAccount`	POST
PKI write issuer issuer ref ACME new order`pkiWriteIssuerIssuerRefAcmeNewOrder`	POST
PKI write issuer issuer ref ACME order order ID`pkiWriteIssuerIssuerRefAcmeOrderOrderId`	POST
PKI write issuer issuer ref ACME order order ID cert`pkiWriteIssuerIssuerRefAcmeOrderOrderIdCert`	POST
PKI write issuer issuer ref ACME order order ID finalize`pkiWriteIssuerIssuerRefAcmeOrderOrderIdFinalize`	POST
PKI write issuer issuer ref ACME orders`pkiWriteIssuerIssuerRefAcmeOrders`	POST
PKI write issuer issuer ref ACME revoke cert`pkiWriteIssuerIssuerRefAcmeRevokeCert`	POST
PKI write issuer issuer ref roles role ACME account kid`pkiWriteIssuerIssuerRefRolesRoleAcmeAccountKid`	POST
PKI write issuer issuer ref roles role ACME authorization auth ID`pkiWriteIssuerIssuerRefRolesRoleAcmeAuthorizationAuthId`	POST
PKI write issuer issuer ref roles role ACME challenge auth ID challenge type`pkiWriteIssuerIssuerRefRolesRoleAcmeChallengeAuthIdChallengeType`	POST
PKI write issuer issuer ref roles role ACME new account`pkiWriteIssuerIssuerRefRolesRoleAcmeNewAccount`	POST
PKI write issuer issuer ref roles role ACME new order`pkiWriteIssuerIssuerRefRolesRoleAcmeNewOrder`	POST
PKI write issuer issuer ref roles role ACME order order ID`pkiWriteIssuerIssuerRefRolesRoleAcmeOrderOrderId`	POST
PKI write issuer issuer ref roles role ACME order order ID cert`pkiWriteIssuerIssuerRefRolesRoleAcmeOrderOrderIdCert`	POST
PKI write issuer issuer ref roles role ACME order order ID finalize`pkiWriteIssuerIssuerRefRolesRoleAcmeOrderOrderIdFinalize`	POST
PKI write issuer issuer ref roles role ACME orders`pkiWriteIssuerIssuerRefRolesRoleAcmeOrders`	POST
PKI write issuer issuer ref roles role ACME revoke cert`pkiWriteIssuerIssuerRefRolesRoleAcmeRevokeCert`	POST
PKI write key`pkiWriteKey`	POST	Fetch a single issuer key
PKI write role`pkiWriteRole`	POST	Manage the roles that can be created with this backend.
PKI write roles role ACME account kid`pkiWriteRolesRoleAcmeAccountKid`	POST
PKI write roles role ACME authorization auth ID`pkiWriteRolesRoleAcmeAuthorizationAuthId`	POST
PKI write roles role ACME challenge auth ID challenge type`pkiWriteRolesRoleAcmeChallengeAuthIdChallengeType`	POST
PKI write roles role ACME new account`pkiWriteRolesRoleAcmeNewAccount`	POST
PKI write roles role ACME new order`pkiWriteRolesRoleAcmeNewOrder`	POST
PKI write roles role ACME order order ID`pkiWriteRolesRoleAcmeOrderOrderId`	POST
PKI write roles role ACME order order ID cert`pkiWriteRolesRoleAcmeOrderOrderIdCert`	POST
PKI write roles role ACME order order ID finalize`pkiWriteRolesRoleAcmeOrderOrderIdFinalize`	POST
PKI write roles role ACME orders`pkiWriteRolesRoleAcmeOrders`	POST
PKI write roles role ACME revoke cert`pkiWriteRolesRoleAcmeRevokeCert`	POST

RabbitMQ secrets8

Rabbit mq configure connection`rabbitMqConfigureConnection`	POST	Configure the connection URI, username, and password to talk to RabbitMQ management HTTP API.
Rabbit mq configure lease`rabbitMqConfigureLease`	POST	Configure the lease parameters for generated credentials
Rabbit mq delete role`rabbitMqDeleteRole`	DELETE	Manage the roles that can be created with this backend.
Rabbit mq list roles`rabbitMqListRoles`	GET	Manage the roles that can be created with this backend.
Rabbit mq read lease configuration`rabbitMqReadLeaseConfiguration`	GET	Configure the lease parameters for generated credentials
Rabbit mq read role`rabbitMqReadRole`	GET	Manage the roles that can be created with this backend.
Rabbit mq write role`rabbitMqWriteRole`	POST	Manage the roles that can be created with this backend.
Request RabbitMQ credentials for a certain role`rabbitMqRequestCredentials`	GET	Request RabbitMQ credentials for a certain role.

RADIUS auth8

Radius configure`radiusConfigure`	POST	Configure the RADIUS server to connect to, along with its options.
Radius delete user`radiusDeleteUser`	DELETE	Manage users allowed to authenticate.
Radius list users`radiusListUsers`	GET	Manage users allowed to authenticate.
Radius login`radiusLogin`	POST	Log in with a username and password.
Radius login with username`radiusLoginWithUsername`	POST	Log in with a username and password.
Radius read configuration`radiusReadConfiguration`	GET	Configure the RADIUS server to connect to, along with its options.
Radius read user`radiusReadUser`	GET	Manage users allowed to authenticate.
Radius write user`radiusWriteUser`	POST	Manage users allowed to authenticate.

SSH secrets17

Creates a credential for establishing SSH connection with the remote host`sshGenerateCredentials`	POST	Creates a credential for establishing SSH connection with the remote host.
List all the roles associated with the given IP address`sshListRolesByIp`	POST	List all the roles associated with the given IP address.
Request signing an SSH key using a certain role with the provided details`sshSignCertificate`	POST	Request signing an SSH key using a certain role with the provided details.
Retrieve the public key`sshReadPublicKey`	GET	Retrieve the public key.
SSH configure CA`sshConfigureCa`	POST	Set the SSH private key used for signing certificates.
SSH configure zero address`sshConfigureZeroAddress`	POST	Assign zero address as default CIDR block for select roles.
SSH delete CA configuration`sshDeleteCaConfiguration`	DELETE	Set the SSH private key used for signing certificates.
SSH delete role`sshDeleteRole`	DELETE	Manage the 'roles' that can be created with this backend.
SSH delete zero address configuration`sshDeleteZeroAddressConfiguration`	DELETE	Assign zero address as default CIDR block for select roles.
SSH issue certificate`sshIssueCertificate`	POST	Request a certificate using a certain role with the provided details.
SSH list roles`sshListRoles`	GET	Manage the 'roles' that can be created with this backend.
SSH read CA configuration`sshReadCaConfiguration`	GET	Set the SSH private key used for signing certificates.
SSH read role`sshReadRole`	GET	Manage the 'roles' that can be created with this backend.
SSH read zero address configuration`sshReadZeroAddressConfiguration`	GET	Assign zero address as default CIDR block for select roles.
SSH tidy dynamic host keys`sshTidyDynamicHostKeys`	DELETE	This endpoint removes the stored host keys used for the removed Dynamic Key feature, if present.
SSH write role`sshWriteRole`	POST	Manage the 'roles' that can be created with this backend.
Validate the OTP provided by Vault SSH Agent`sshVerifyOtp`	POST	Validate the OTP provided by Vault SSH Agent.

System307

Activation flags activate activation test`activationFlagsActivateActivationTest`	POST	Activate a flagged feature.
Activation flags activate enable SCIM`activationFlagsActivateEnableScim`	POST	Activate a flagged feature.
Activation flags activate force identity deduplication`activationFlagsActivateForceIdentityDeduplication`	POST	Activate a flagged feature.
Add a new or update an existing ACL policy`policiesWriteAclPolicy`	POST	Add a new or update an existing ACL policy.
Add a new or update an existing password policy`policiesWritePasswordPolicy`	POST	Add a new or update an existing password policy.
Add a new or update an existing policy`policiesWriteAclPolicy2`	POST	Add a new or update an existing policy.
Auditing calculate hash`auditingCalculateHash`	POST	The hash of the given string via the given audit backend
Auth list enabled methods`authListEnabledMethods`	GET	List the currently enabled credential backends.
Auth read tuning information`authReadTuningInformation`	GET	Reads the given auth path's configuration.
Auth tune configuration parameters`authTuneConfigurationParameters`	POST	Tune configuration parameters for a given auth path.
Cancel any in-progress recovery key rekey verification operation`rekeyRecoveryKeyVerificationCancel`	DELETE	Cancel any in-progress recovery key rekey verification operation.
Cancel any in-progress rekey verification operation`rekeyVerificationCancel`	DELETE	Cancel any in-progress rekey verification operation.
Cancels any in-progress recovery key rekey`rekeyRecoveryKeyAttemptCancel`	DELETE	Cancels any in-progress recovery key rekey.
Cancels any in-progress rekey`rekeyAttemptCancel`	DELETE	Cancels any in-progress rekey.
Cause the node to give up active status`stepDownLeader`	POST	Cause the node to give up active status.
Check status of a mount migration`remountStatus`	GET	Check status of a mount migration
Check the HA status of a Vault cluster`haStatus`	GET	Check the HA status of a Vault cluster
Check the seal status of a Vault`sealStatus`	GET	Check the seal status of a Vault.
Configure the billing data retention period`systemWriteBillingConfig`	POST	Configure the billing data retention period.
Configure the CORS settings`corsConfigure`	POST	Configure the CORS settings.
Configure the values to be returned for the UI header`uiHeadersConfigure`	POST	Configure the values to be returned for the UI header.
Create or update the pinned version for a plugin with a given type and name`pluginsCatalogPinsCreatePinnedVersion`	POST	Create or update the pinned version for a plugin with a given type and name.
Decodes the encoded token with the otp`decodeToken`	POST	Decodes the encoded token with the otp.
Delete a password policy`policiesDeletePasswordPolicy`	DELETE	Delete a password policy.
Delete the ACL policy with the given name`policiesDeleteAclPolicy`	DELETE	Delete the ACL policy with the given name.
Delete the backup copy of PGP-encrypted unseal keys`rekeyDeleteBackupKey`	DELETE	Delete the backup copy of PGP-encrypted unseal keys.
Delete the key with given path`rawDelete`	DELETE	Delete the key with given path.
Delete the policy with the given name`policiesDeleteAclPolicy2`	DELETE	Delete the policy with the given name.
Disable auditing of the given request header`auditingDisableRequestHeader`	DELETE	Disable auditing of the given request header.
Disable the audit device at the given path`auditingDisableDevice`	DELETE	Disable the audit device at the given path.
Disable the auth method at the given auth path`authDisableMethod`	DELETE	Disable the auth method at the given auth path
Disable the mount point specified at the given path`mountsDisableSecretsEngine`	DELETE	Disable the mount point specified at the given path.
Enable a new audit device at the supplied path`auditingEnableDevice`	POST	Enable a new audit device at the supplied path.
Enable a new secrets engine at the given path`mountsEnableSecretsEngine`	POST	Enable a new secrets engine at the given path.
Enable auditing of a header`auditingEnableRequestHeader`	POST	Enable auditing of a header.
Enables a new auth method`authEnableMethod`	POST	Enables a new auth method.
Encryption key configure rotation`encryptionKeyConfigureRotation`	POST	Configures settings related to the backend encryption key management.
Encryption key read rotation configuration`encryptionKeyReadRotationConfiguration`	GET	Configures settings related to the backend encryption key management.
Encryption key rotate`encryptionKeyRotate`	POST	Rotates the backend encryption key used to persist data.
Enter a single new key share to progress the rekey verification operation`rekeyVerificationUpdate`	POST	Enter a single new key share to progress the rekey verification operation.
Enter a single new recovery key share to progress the rekey verification operation`rekeyRecoveryKeyVerificationUpdate`	POST	Enter a single new recovery key share to progress the rekey verification operation.
Enter a single recovery key share to progress the rekey of the Vault`rekeyRecoveryKeyAttemptUpdate`	POST	Enter a single recovery key share to progress the rekey of the Vault.
Enter a single unseal key share to progress the rekey of the Vault`rekeyAttemptUpdate`	POST	Enter a single unseal key share to progress the rekey of the Vault.
Enter a single unseal key share to progress the root generation attempt`rootTokenGenerationUpdate`	POST	Enter a single unseal key share to progress the root generation attempt.
Enterprise stub delete config control group`enterpriseStubDeleteConfigControlGroup`	DELETE	Vault DELETE /sys/config/control-group.
Enterprise stub delete config oauth resource server name`enterpriseStubDeleteConfigOauthResourceServerName`	DELETE	Vault DELETE /sys/config/oauth-resource-server/{name}.
Enterprise stub delete managed keys type name`enterpriseStubDeleteManagedKeysTypeName`	DELETE	Vault DELETE /sys/managed-keys/{type}/{name}.
Enterprise stub delete MFA method duo name`enterpriseStubDeleteMfaMethodDuoName`	DELETE	Vault DELETE /sys/mfa/method/duo/{name}.
Enterprise stub delete MFA method okta name`enterpriseStubDeleteMfaMethodOktaName`	DELETE	Vault DELETE /sys/mfa/method/okta/{name}.
Enterprise stub delete MFA method pingid name`enterpriseStubDeleteMfaMethodPingidName`	DELETE	Vault DELETE /sys/mfa/method/pingid/{name}.
Enterprise stub delete MFA method TOTP name`enterpriseStubDeleteMfaMethodTotpName`	DELETE	Vault DELETE /sys/mfa/method/totp/{name}.
Enterprise stub delete namespaces path`enterpriseStubDeleteNamespacesPath`	DELETE	Vault DELETE /sys/namespaces/{path}.
Enterprise stub delete policies egp name`enterpriseStubDeletePoliciesEgpName`	DELETE	Vault DELETE /sys/policies/egp/{name}.
Enterprise stub delete policies rgp name`enterpriseStubDeletePoliciesRgpName`	DELETE	Vault DELETE /sys/policies/rgp/{name}.
Enterprise stub delete quotas lease count name`enterpriseStubDeleteQuotasLeaseCountName`	DELETE	Vault DELETE /sys/quotas/lease-count/{name}.
Enterprise stub delete replication performance primary paths filter ID`enterpriseStubDeleteReplicationPerformancePrimaryPathsFilterId`	DELETE	Vault DELETE /sys/replication/performance/primary/paths-filter/{id}.
Enterprise stub delete storage raft snapshot auto config name`enterpriseStubDeleteStorageRaftSnapshotAutoConfigName`	DELETE	Vault DELETE /sys/storage/raft/snapshot-auto/config/{name}.
Enterprise stub list config oauth resource server`enterpriseStubListConfigOauthResourceServer`	GET	Vault GET /sys/config/oauth-resource-server/.
Enterprise stub list managed keys type`enterpriseStubListManagedKeysType`	GET	Vault GET /sys/managed-keys/{type}/.
Enterprise stub list MFA method`enterpriseStubListMfaMethod`	GET	Vault GET /sys/mfa/method/.
Enterprise stub list namespaces`enterpriseStubListNamespaces`	GET	Vault GET /sys/namespaces/.
Enterprise stub list policies egp`enterpriseStubListPoliciesEgp`	GET	Vault GET /sys/policies/egp/.
Enterprise stub list policies rgp`enterpriseStubListPoliciesRgp`	GET	Vault GET /sys/policies/rgp/.
Enterprise stub list quotas lease count`enterpriseStubListQuotasLeaseCount`	GET	Vault GET /sys/quotas/lease-count/.
Enterprise stub list storage raft snapshot auto config`enterpriseStubListStorageRaftSnapshotAutoConfig`	GET	Vault GET /sys/storage/raft/snapshot-auto/config/.
Enterprise stub patch namespaces path`enterpriseStubPatchNamespacesPath`	PATCH	Vault PATCH /sys/namespaces/{path}.
Enterprise stub read config control group`enterpriseStubReadConfigControlGroup`	GET	Vault GET /sys/config/control-group.
Enterprise stub read config group policy application`enterpriseStubReadConfigGroupPolicyApplication`	GET	Vault GET /sys/config/group-policy-application.
Enterprise stub read config oauth resource server ID config ID`enterpriseStubReadConfigOauthResourceServerIdConfigId`	GET	Vault GET /sys/config/oauth-resource-server/id/{config id}.
Enterprise stub read config oauth resource server name`enterpriseStubReadConfigOauthResourceServerName`	GET	Vault GET /sys/config/oauth-resource-server/{name}.
Enterprise stub read license status`enterpriseStubReadLicenseStatus`	GET	Vault GET /sys/license/status.
Enterprise stub read managed keys type name`enterpriseStubReadManagedKeysTypeName`	GET	Vault GET /sys/managed-keys/{type}/{name}.
Enterprise stub read MFA method duo name`enterpriseStubReadMfaMethodDuoName`	GET	Vault GET /sys/mfa/method/duo/{name}.
Enterprise stub read MFA method okta name`enterpriseStubReadMfaMethodOktaName`	GET	Vault GET /sys/mfa/method/okta/{name}.
Enterprise stub read MFA method pingid name`enterpriseStubReadMfaMethodPingidName`	GET	Vault GET /sys/mfa/method/pingid/{name}.
Enterprise stub read MFA method TOTP name`enterpriseStubReadMfaMethodTotpName`	GET	Vault GET /sys/mfa/method/totp/{name}.
Enterprise stub read MFA method TOTP name generate`enterpriseStubReadMfaMethodTotpNameGenerate`	GET	Vault GET /sys/mfa/method/totp/{name}/generate.
Enterprise stub read namespaces path`enterpriseStubReadNamespacesPath`	GET	Vault GET /sys/namespaces/{path}.
Enterprise stub read plugins reload backend status`enterpriseStubReadPluginsReloadBackendStatus`	GET	Vault GET /sys/plugins/reload/backend/status.
Enterprise stub read policies egp name`enterpriseStubReadPoliciesEgpName`	GET	Vault GET /sys/policies/egp/{name}.
Enterprise stub read policies rgp name`enterpriseStubReadPoliciesRgpName`	GET	Vault GET /sys/policies/rgp/{name}.
Enterprise stub read quotas lease count name`enterpriseStubReadQuotasLeaseCountName`	GET	Vault GET /sys/quotas/lease-count/{name}.
Enterprise stub read replication DR secondary license status`enterpriseStubReadReplicationDrSecondaryLicenseStatus`	GET	Vault GET /sys/replication/dr/secondary/license/status.
Enterprise stub read replication DR status`enterpriseStubReadReplicationDrStatus`	GET	Vault GET /sys/replication/dr/status.
Enterprise stub read replication performance primary dynamic filter ID`enterpriseStubReadReplicationPerformancePrimaryDynamicFilterId`	GET	Vault GET /sys/replication/performance/primary/dynamic-filter/{id}.
Enterprise stub read replication performance primary paths filter ID`enterpriseStubReadReplicationPerformancePrimaryPathsFilterId`	GET	Vault GET /sys/replication/performance/primary/paths-filter/{id}.
Enterprise stub read replication performance secondary dynamic filter ID`enterpriseStubReadReplicationPerformanceSecondaryDynamicFilterId`	GET	Vault GET /sys/replication/performance/secondary/dynamic-filter/{id}.
Enterprise stub read replication performance status`enterpriseStubReadReplicationPerformanceStatus`	GET	Vault GET /sys/replication/performance/status.
Enterprise stub read sealwrap rewrap`enterpriseStubReadSealwrapRewrap`	GET	Vault GET /sys/sealwrap/rewrap.
Enterprise stub read storage raft snapshot auto config name`enterpriseStubReadStorageRaftSnapshotAutoConfigName`	GET	Vault GET /sys/storage/raft/snapshot-auto/config/{name}.
Enterprise stub read storage raft snapshot auto status name`enterpriseStubReadStorageRaftSnapshotAutoStatusName`	GET	Vault GET /sys/storage/raft/snapshot-auto/status/{name}.
Enterprise stub write config control group`enterpriseStubWriteConfigControlGroup`	POST	Vault POST /sys/config/control-group.
Enterprise stub write config group policy application`enterpriseStubWriteConfigGroupPolicyApplication`	POST	Vault POST /sys/config/group-policy-application.
Enterprise stub write config oauth resource server name`enterpriseStubWriteConfigOauthResourceServerName`	POST	Vault POST /sys/config/oauth-resource-server/{name}.
Enterprise stub write control group authorize`enterpriseStubWriteControlGroupAuthorize`	POST	Vault POST /sys/control-group/authorize.
Enterprise stub write control group request`enterpriseStubWriteControlGroupRequest`	POST	Vault POST /sys/control-group/request.
Enterprise stub write managed keys type name`enterpriseStubWriteManagedKeysTypeName`	POST	Vault POST /sys/managed-keys/{type}/{name}.
Enterprise stub write managed keys type name test sign`enterpriseStubWriteManagedKeysTypeNameTestSign`	POST	Vault POST /sys/managed-keys/{type}/{name}/test/sign.
Enterprise stub write MFA method duo name`enterpriseStubWriteMfaMethodDuoName`	POST	Vault POST /sys/mfa/method/duo/{name}.
Enterprise stub write MFA method okta name`enterpriseStubWriteMfaMethodOktaName`	POST	Vault POST /sys/mfa/method/okta/{name}.
Enterprise stub write MFA method pingid name`enterpriseStubWriteMfaMethodPingidName`	POST	Vault POST /sys/mfa/method/pingid/{name}.
Enterprise stub write MFA method TOTP name`enterpriseStubWriteMfaMethodTotpName`	POST	Vault POST /sys/mfa/method/totp/{name}.
Enterprise stub write MFA method TOTP name admin destroy`enterpriseStubWriteMfaMethodTotpNameAdminDestroy`	POST	Vault POST /sys/mfa/method/totp/{name}/admin-destroy.
Enterprise stub write MFA method TOTP name admin generate`enterpriseStubWriteMfaMethodTotpNameAdminGenerate`	POST	Vault POST /sys/mfa/method/totp/{name}/admin-generate.
Enterprise stub write namespaces API lock lock`enterpriseStubWriteNamespacesApiLockLock`	POST	Vault POST /sys/namespaces/api-lock/lock.
Enterprise stub write namespaces API lock lock path`enterpriseStubWriteNamespacesApiLockLockPath`	POST	Vault POST /sys/namespaces/api-lock/lock/{path}.
Enterprise stub write namespaces API lock unlock`enterpriseStubWriteNamespacesApiLockUnlock`	POST	Vault POST /sys/namespaces/api-lock/unlock.
Enterprise stub write namespaces API lock unlock path`enterpriseStubWriteNamespacesApiLockUnlockPath`	POST	Vault POST /sys/namespaces/api-lock/unlock/{path}.
Enterprise stub write namespaces path`enterpriseStubWriteNamespacesPath`	POST	Vault POST /sys/namespaces/{path}.
Enterprise stub write policies egp name`enterpriseStubWritePoliciesEgpName`	POST	Vault POST /sys/policies/egp/{name}.
Enterprise stub write policies rgp name`enterpriseStubWritePoliciesRgpName`	POST	Vault POST /sys/policies/rgp/{name}.
Enterprise stub write quotas lease count name`enterpriseStubWriteQuotasLeaseCountName`	POST	Vault POST /sys/quotas/lease-count/{name}.
Enterprise stub write replication DR primary demote`enterpriseStubWriteReplicationDrPrimaryDemote`	POST	Vault POST /sys/replication/dr/primary/demote.
Enterprise stub write replication DR primary disable`enterpriseStubWriteReplicationDrPrimaryDisable`	POST	Vault POST /sys/replication/dr/primary/disable.
Enterprise stub write replication DR primary enable`enterpriseStubWriteReplicationDrPrimaryEnable`	POST	Vault POST /sys/replication/dr/primary/enable.
Enterprise stub write replication DR primary revoke secondary`enterpriseStubWriteReplicationDrPrimaryRevokeSecondary`	POST	Vault POST /sys/replication/dr/primary/revoke-secondary.
Enterprise stub write replication DR primary secondary token`enterpriseStubWriteReplicationDrPrimarySecondaryToken`	POST	Vault POST /sys/replication/dr/primary/secondary-token.
Enterprise stub write replication DR secondary config reload subsystem`enterpriseStubWriteReplicationDrSecondaryConfigReloadSubsystem`	POST	Vault POST /sys/replication/dr/secondary/config/reload/{subsystem}.
Enterprise stub write replication DR secondary disable`enterpriseStubWriteReplicationDrSecondaryDisable`	POST	Vault POST /sys/replication/dr/secondary/disable.
Enterprise stub write replication DR secondary enable`enterpriseStubWriteReplicationDrSecondaryEnable`	POST	Vault POST /sys/replication/dr/secondary/enable.
Enterprise stub write replication DR secondary generate public key`enterpriseStubWriteReplicationDrSecondaryGeneratePublicKey`	POST	Vault POST /sys/replication/dr/secondary/generate-public-key.
Enterprise stub write replication DR secondary operation token delete`enterpriseStubWriteReplicationDrSecondaryOperationTokenDelete`	POST	Vault POST /sys/replication/dr/secondary/operation-token/delete.
Enterprise stub write replication DR secondary promote`enterpriseStubWriteReplicationDrSecondaryPromote`	POST	Vault POST /sys/replication/dr/secondary/promote.
Enterprise stub write replication DR secondary recover`enterpriseStubWriteReplicationDrSecondaryRecover`	POST	Vault POST /sys/replication/dr/secondary/recover.
Enterprise stub write replication DR secondary reindex`enterpriseStubWriteReplicationDrSecondaryReindex`	POST	Vault POST /sys/replication/dr/secondary/reindex.
Enterprise stub write replication DR secondary update primary`enterpriseStubWriteReplicationDrSecondaryUpdatePrimary`	POST	Vault POST /sys/replication/dr/secondary/update-primary.
Enterprise stub write replication performance primary demote`enterpriseStubWriteReplicationPerformancePrimaryDemote`	POST	Vault POST /sys/replication/performance/primary/demote.
Enterprise stub write replication performance primary disable`enterpriseStubWriteReplicationPerformancePrimaryDisable`	POST	Vault POST /sys/replication/performance/primary/disable.
Enterprise stub write replication performance primary enable`enterpriseStubWriteReplicationPerformancePrimaryEnable`	POST	Vault POST /sys/replication/performance/primary/enable.
Enterprise stub write replication performance primary paths filter ID`enterpriseStubWriteReplicationPerformancePrimaryPathsFilterId`	POST	Vault POST /sys/replication/performance/primary/paths-filter/{id}.
Enterprise stub write replication performance primary revoke secondary`enterpriseStubWriteReplicationPerformancePrimaryRevokeSecondary`	POST	Vault POST /sys/replication/performance/primary/revoke-secondary.
Enterprise stub write replication performance primary secondary token`enterpriseStubWriteReplicationPerformancePrimarySecondaryToken`	POST	Vault POST /sys/replication/performance/primary/secondary-token.
Enterprise stub write replication performance secondary disable`enterpriseStubWriteReplicationPerformanceSecondaryDisable`	POST	Vault POST /sys/replication/performance/secondary/disable.
Enterprise stub write replication performance secondary enable`enterpriseStubWriteReplicationPerformanceSecondaryEnable`	POST	Vault POST /sys/replication/performance/secondary/enable.
Enterprise stub write replication performance secondary generate public key`enterpriseStubWriteReplicationPerformanceSecondaryGeneratePublicKey`	POST	Vault POST /sys/replication/performance/secondary/generate-public-key.
Enterprise stub write replication performance secondary promote`enterpriseStubWriteReplicationPerformanceSecondaryPromote`	POST	Vault POST /sys/replication/performance/secondary/promote.
Enterprise stub write replication performance secondary update primary`enterpriseStubWriteReplicationPerformanceSecondaryUpdatePrimary`	POST	Vault POST /sys/replication/performance/secondary/update-primary.
Enterprise stub write replication primary demote`enterpriseStubWriteReplicationPrimaryDemote`	POST	Vault POST /sys/replication/primary/demote.
Enterprise stub write replication primary disable`enterpriseStubWriteReplicationPrimaryDisable`	POST	Vault POST /sys/replication/primary/disable.
Enterprise stub write replication primary enable`enterpriseStubWriteReplicationPrimaryEnable`	POST	Vault POST /sys/replication/primary/enable.
Enterprise stub write replication primary revoke secondary`enterpriseStubWriteReplicationPrimaryRevokeSecondary`	POST	Vault POST /sys/replication/primary/revoke-secondary.
Enterprise stub write replication primary secondary token`enterpriseStubWriteReplicationPrimarySecondaryToken`	POST	Vault POST /sys/replication/primary/secondary-token.
Enterprise stub write replication recover`enterpriseStubWriteReplicationRecover`	POST	Vault POST /sys/replication/recover.
Enterprise stub write replication reindex`enterpriseStubWriteReplicationReindex`	POST	Vault POST /sys/replication/reindex.
Enterprise stub write replication secondary disable`enterpriseStubWriteReplicationSecondaryDisable`	POST	Vault POST /sys/replication/secondary/disable.
Enterprise stub write replication secondary enable`enterpriseStubWriteReplicationSecondaryEnable`	POST	Vault POST /sys/replication/secondary/enable.
Enterprise stub write replication secondary promote`enterpriseStubWriteReplicationSecondaryPromote`	POST	Vault POST /sys/replication/secondary/promote.
Enterprise stub write replication secondary update primary`enterpriseStubWriteReplicationSecondaryUpdatePrimary`	POST	Vault POST /sys/replication/secondary/update-primary.
Enterprise stub write reporting scan`enterpriseStubWriteReportingScan`	POST	Vault POST /sys/reporting/scan.
Enterprise stub write sealwrap rewrap`enterpriseStubWriteSealwrapRewrap`	POST	Vault POST /sys/sealwrap/rewrap.
Enterprise stub write storage raft snapshot auto config name`enterpriseStubWriteStorageRaftSnapshotAutoConfigName`	POST	Vault POST /sys/storage/raft/snapshot-auto/config/{name}.
Expose the route entry and mount entry tables present in the router`internalInspectRouter`	GET	Expose the route entry and mount entry tables present in the router
Generate a password from an existing password policy`policiesGeneratePasswordFromPasswordPolicy`	GET	Generate a password from an existing password policy.
Generate hash`generateHash`	POST	Generate a hash sum for input data
Generate hash with algorithm`generateHashWithAlgorithm`	POST	Generate a hash sum for input data
Generate random`generateRandom`	POST	Generate random bytes
Generate random with bytes`generateRandomWithBytes`	POST	Generate random bytes
Generate random with source`generateRandomWithSource`	POST	Generate random bytes
Generate random with source and bytes`generateRandomWithSourceAndBytes`	POST	Generate random bytes
Information about the host instance that this Vault server is running on`collectHostInformation`	GET	Information about the host instance that this Vault server is running on.
Initialize a new Vault`initialize`	POST	Initialize a new Vault.
Initializes a new recovery key rekey attempt`rekeyRecoveryKeyAttemptInitialize`	POST	Initializes a new recovery key rekey attempt.
Initializes a new rekey attempt`rekeyAttemptInitialize`	POST	Initializes a new rekey attempt.
Initiate a mount migration`remount`	POST	Initiate a mount migration
Internal client activity configure`internalClientActivityConfigure`	POST	Enable or disable collection of client count, set retention period, or set default reporting period.
Internal client activity export`internalClientActivityExport`	GET	Report the client count metrics, for this namespace and all child namespaces.
Internal client activity report counts`internalClientActivityReportCounts`	GET	Report the client count metrics, for this namespace and all child namespaces.
Internal count entities`internalCountEntities`	GET	Backwards compatibility is not guaranteed for this API
Internal count requests`internalCountRequests`	GET	Backwards compatibility is not guaranteed for this API
Internal generate open API document`internalGenerateOpenApiDocument`	GET	Generate an OpenAPI 3 document of all mounted paths.
Internal generate open API document with parameters`internalGenerateOpenApiDocumentWithParameters`	POST	Generate an OpenAPI 3 document of all mounted paths.
Internal UI list namespaces`internalUiListNamespaces`	GET	Backwards compatibility is not guaranteed for this API
Internal UI read resultant acl`internalUiReadResultantAcl`	GET	Backwards compatibility is not guaranteed for this API
Leases count`leasesCount`	GET	Count of leases associated with this Vault cluster
Leases force revoke lease with prefix`leasesForceRevokeLeaseWithPrefix`	POST	Revokes all secrets or tokens generated under a given prefix immediately
Leases force revoke lease with prefix2`leasesForceRevokeLeaseWithPrefix2`	POST	Revokes all secrets or tokens generated under a given prefix immediately
Leases list`leasesList`	GET	List leases associated with this Vault cluster
Leases look up`leasesLookUp`	GET	View or list lease metadata.
Leases read lease`leasesReadLease`	POST	View or list lease metadata.
Leases renew lease`leasesRenewLease`	POST	Renews a lease, requesting to extend the lease.
Leases renew lease with ID`leasesRenewLeaseWithId`	POST	Renews a lease, requesting to extend the lease.
Leases renew lease with id2`leasesRenewLeaseWithId2`	POST	Renews a lease, requesting to extend the lease.
Leases renew lease2`leasesRenewLease2`	POST	Renews a lease, requesting to extend the lease.
Leases revoke lease`leasesRevokeLease`	POST	Revokes a lease immediately.
Leases revoke lease with ID`leasesRevokeLeaseWithId`	POST	Revokes a lease immediately.
Leases revoke lease with id2`leasesRevokeLeaseWithId2`	POST	Revokes a lease immediately.
Leases revoke lease with prefix`leasesRevokeLeaseWithPrefix`	POST	Revokes all secrets (via a lease ID prefix) or tokens (via the tokens' path property) generated under a given prefix immediately.
Leases revoke lease with prefix2`leasesRevokeLeaseWithPrefix2`	POST	Revokes all secrets (via a lease ID prefix) or tokens (via the tokens' path property) generated under a given prefix immediately.
Leases revoke lease2`leasesRevokeLease2`	POST	Revokes a lease immediately.
Leases tidy`leasesTidy`	POST	This endpoint performs cleanup tasks that can be run if certain error conditions have occurred.
List the enabled audit devices`auditingListEnabledDevices`	GET	List the enabled audit devices.
List the existing password policies`policiesListPasswordPolicies`	GET	List the existing password policies.
List the information for the given request header`auditingReadRequestHeaderInformation`	GET	List the information for the given request header.
List the plugins in the catalog`pluginsCatalogListPluginsWithType`	GET	List the plugins in the catalog.
List the request headers that are configured to be audited`auditingListRequestHeaders`	GET	List the request headers that are configured to be audited.
Lists all enabled and visible auth and secrets mounts`internalUiListEnabledVisibleMounts`	GET	Lists all enabled and visible auth and secrets mounts.
Lists enabled feature flags`internalUiListEnabledFeatureFlags`	GET	Lists enabled feature flags.
Look up wrapping properties for the given token`readWrappingProperties`	POST	Look up wrapping properties for the given token.
Look up wrapping properties for the requester's token`readWrappingProperties2`	GET	Look up wrapping properties for the requester's token.
Metrics`metrics`	GET	Export the metrics aggregated for telemetry purpose.
Modify the log level for all existing loggers`loggersUpdateVerbosityLevel`	POST	Modify the log level for all existing loggers.
Modify the log level of a single logger`loggersUpdateVerbosityLevelFor`	POST	Modify the log level of a single logger.
Monitor`monitor`	GET	Vault GET /sys/monitor.
Mounts auth read tuning information`mountsAuthReadTuningInformation`	GET	Reads the given auth path's configuration.
Mounts auth tune configuration parameters`mountsAuthTuneConfigurationParameters`	POST	Tune configuration parameters for a given auth path.
Mounts list secrets engines`mountsListSecretsEngines`	GET	List the currently mounted backends.
Mounts read tuning information`mountsReadTuningInformation`	GET	Tune backend configuration parameters for this mount.
Mounts tune configuration parameters`mountsTuneConfigurationParameters`	POST	Tune backend configuration parameters for this mount.
Plugins catalog list plugins`pluginsCatalogListPlugins`	GET	Lists all the plugins known to Vault
Plugins catalog pins list pinned versions`pluginsCatalogPinsListPinnedVersions`	GET	Lists all the pinned plugin versions known to Vault
Plugins catalog read plugin configuration`pluginsCatalogReadPluginConfiguration`	GET	Return the configuration data for the plugin with the given name.
Plugins catalog read plugin configuration with type`pluginsCatalogReadPluginConfigurationWithType`	GET	Return the configuration data for the plugin with the given name.
Plugins catalog register plugin`pluginsCatalogRegisterPlugin`	POST	Register a new plugin, or updates an existing one with the supplied name.
Plugins catalog register plugin with type`pluginsCatalogRegisterPluginWithType`	POST	Register a new plugin, or updates an existing one with the supplied name.
Plugins catalog remove plugin`pluginsCatalogRemovePlugin`	DELETE	Remove the plugin with the given name.
Plugins catalog remove plugin with type`pluginsCatalogRemovePluginWithType`	DELETE	Remove the plugin with the given name.
Plugins runtimes catalog list plugins runtimes list`pluginsRuntimesCatalogListPluginsRuntimesList`	GET	List all plugin runtimes in the catalog as a map of type to names.
Plugins runtimes catalog list plugins runtimes read`pluginsRuntimesCatalogListPluginsRuntimesRead`	GET	List all plugin runtimes in the catalog as a map of type to names.
Policies list acl policies`policiesListAclPolicies`	GET	List the configured access control policies.
Policies list acl policies2`policiesListAclPolicies2`	GET	List the configured access control policies.
Policies list acl policies3`policiesListAclPolicies3`	GET	List the configured access control policies.
Provides information about the backend encryption key`encryptionKeyStatus`	GET	Provides information about the backend encryption key.
Query token accessor capabilities`queryTokenAccessorCapabilities`	POST	Fetches the capabilities of the token associated with the given token, on the given path.
Query token capabilities`queryTokenCapabilities`	POST	Fetches the capabilities of the given token on the given path.
Query token self capabilities`queryTokenSelfCapabilities`	POST	Fetches the capabilities of the given token on the given path.
Rate limit quotas configure`rateLimitQuotasConfigure`	POST	Create, update and read the quota configuration.
Rate limit quotas delete`rateLimitQuotasDelete`	DELETE	Get, create or update rate limit resource quota for an optional namespace or mount.
Rate limit quotas list`rateLimitQuotasList`	GET	Lists the names of all the rate limit quotas.
Rate limit quotas read`rateLimitQuotasRead`	GET	Get, create or update rate limit resource quota for an optional namespace or mount.
Rate limit quotas read configuration`rateLimitQuotasReadConfiguration`	GET	Create, update and read the quota configuration.
Rate limit quotas write`rateLimitQuotasWrite`	POST	Get, create or update rate limit resource quota for an optional namespace or mount.
Read replication status`readReplicationStatus`	GET	Vault GET /sys/replication/status.
Read the billing data retention configuration`systemReadBillingConfig`	GET	Read the billing data retention configuration.
Read the client count tracking configuration`internalClientActivityReadConfiguration`	GET	Read the client count tracking configuration.
Read the configuration and progress of the current recovery key rekey verification attempt`rekeyRecoveryKeyVerificationReadProgress`	GET	Read the configuration and progress of the current recovery key rekey verification attempt.
Read the configuration and progress of the current rekey verification attempt`rekeyVerificationReadProgress`	GET	Read the configuration and progress of the current rekey verification attempt.
Read the configuration of the auth engine at the given path`authReadConfiguration`	GET	Read the configuration of the auth engine at the given path.
Read the configuration of the secret engine at the given path`mountsReadConfiguration`	GET	Read the configuration of the secret engine at the given path.
Read the log level for a single logger`loggersReadVerbosityLevelFor`	GET	Read the log level for a single logger.
Read the log level for all existing loggers`loggersReadVerbosityLevel`	GET	Read the log level for all existing loggers.
Read the value of the key at the given path`rawRead`	GET	Read the value of the key at the given path.
Reads the configuration and progress of the current recovery key rekey attempt`rekeyRecoveryKeyAttemptReadProgress`	GET	Reads the configuration and progress of the current recovery key rekey attempt.
Reads the configuration and progress of the current rekey attempt`rekeyAttemptReadProgress`	GET	Reads the configuration and progress of the current rekey attempt.
Register a new plugin runtime, or updates an existing one with the supplied name`pluginsRuntimesCatalogRegisterPluginRuntime`	POST	Register a new plugin runtime, or updates an existing one with the supplied name.
Rekey delete backup recovery key`rekeyDeleteBackupRecoveryKey`	DELETE	Allows fetching or deleting the backup of the rotated unseal keys.
Rekey read backup recovery key`rekeyReadBackupRecoveryKey`	GET	Allows fetching or deleting the backup of the rotated unseal keys.
Reload all instances of a specific plugin`reloadPlugins`	POST	Reload all instances of a specific plugin.
Reload mounted plugin backends`pluginsReloadBackends`	POST	Reload mounted plugin backends.
Reload the given subsystem`reloadSubsystem`	POST	Reload the given subsystem
Remove a UI header`uiHeadersDeleteConfiguration`	DELETE	Remove a UI header.
Remove any CORS settings`corsDeleteConfiguration`	DELETE	Remove any CORS settings.
Remove any pinned version for the plugin with the given type and name`pluginsCatalogPinsRemovePinnedVersion`	DELETE	Remove any pinned version for the plugin with the given type and name.
Remove the plugin runtime with the given name`pluginsRuntimesCatalogRemovePluginRuntime`	DELETE	Remove the plugin runtime with the given name.
Report the locked user count metrics, for this namespace and all child namespaces`lockedUsersList`	GET	Report the locked user count metrics, for this namespace and all child namespaces.
Report the number of clients for this month, for this namespace and all child namespaces`internalClientActivityReportCountsThisMonth`	GET	Report the number of clients for this month, for this namespace and all child namespaces.
Reports consumption billing metrics on a monthly granularity`systemReadBillingOverview`	GET	Reports consumption billing metrics on a monthly granularity.
reports in-flight requests`collectInFlightRequestInformation`	GET	reports in-flight requests
Retrieve an existing password policy`policiesReadPasswordPolicy`	GET	Retrieve an existing password policy.
Retrieve information about the named ACL policy`policiesReadAclPolicy`	GET	Retrieve information about the named ACL policy.
Retrieve the associated mount information for a registered well-known label`wellKnownReadLabel`	GET	Retrieve the associated mount information for a registered well-known label.
Retrieve the policy body for the named policy`policiesReadAclPolicy2`	GET	Retrieve the policy body for the named policy.
Retrieves Active post-login Custom Messages`internalUiReadAuthenticatedActiveCustomMessages`	GET	Retrieves Active post-login Custom Messages
Retrieves Active pre-login Custom Messages`internalUiReadUnauthenticatedActiveCustomMessages`	GET	Retrieves Active pre-login Custom Messages
Return a list keys for a given path prefix`rawList`	GET	Return a list keys for a given path prefix.
Return a list of configured UI headers`uiHeadersList`	GET	Return a list of configured UI headers.
Return a sanitized version of the Vault server configuration`readSanitizedConfigurationState`	GET	Return a sanitized version of the Vault server configuration.
Return information about the given mount`internalUiReadMountInformation`	GET	Return information about the given mount.
Return the backup copy of PGP-encrypted unseal keys`rekeyReadBackupKey`	GET	Return the backup copy of PGP-encrypted unseal keys.
Return the configuration data for the plugin runtime with the given name`pluginsRuntimesCatalogReadPluginRuntimeConfiguration`	GET	Return the configuration data for the plugin runtime with the given name.
Return the current CORS settings`corsReadConfiguration`	GET	Return the current CORS settings.
Return the given UI header's configuration`uiHeadersReadConfiguration`	GET	Return the given UI header's configuration
Return the pinned version for the plugin with the given type and name`pluginsCatalogPinsReadPinnedVersion`	GET	Return the pinned version for the plugin with the given type and name.
Returns a pprof-formatted cpu profile payload`pprofCpuProfile`	GET	Returns a pprof-formatted cpu profile payload.
Returns a sampling of all past memory allocations`pprofMemoryAllocations`	GET	Returns a sampling of all past memory allocations.
Returns a sampling of memory allocations of live object`pprofMemoryAllocationsLive`	GET	Returns a sampling of memory allocations of live object.
Returns an HTML page listing the available profiles`pprofIndex`	GET	Returns an HTML page listing the available profiles.
Returns map of historical version change entries`versionHistory`	GET	Returns map of historical version change entries
Returns stack traces of all current goroutines`pprofGoroutines`	GET	Returns stack traces of all current goroutines.
Returns stack traces of holders of contended mutexes`pprofMutexes`	GET	Returns stack traces of holders of contended mutexes
Returns stack traces that led to blocking on synchronization primitives`pprofBlocking`	GET	Returns stack traces that led to blocking on synchronization primitives
Returns stack traces that led to the creation of new OS threads`pprofThreadCreations`	GET	Returns stack traces that led to the creation of new OS threads
Returns the available and activated activation-flagged features`readActivationFlags`	GET	Returns the available and activated activation-flagged features.
Returns the available and enabled experiments`listExperimentalFeatures`	GET	Returns the available and enabled experiments
Returns the execution trace in binary form`pprofExecutionTrace`	GET	Returns the execution trace in binary form.
Returns the health status of Vault`readHealthStatus`	GET	Returns the health status of Vault.
Returns the high availability status and current leader instance of Vault`leaderStatus`	GET	Returns the high availability status and current leader instance of Vault.
Returns the initialization status of Vault`readInitializationStatus`	GET	Returns the initialization status of Vault.
Returns the program counters listed in the request`pprofSymbols`	GET	Returns the program counters listed in the request.
Returns the running program's command line`pprofCommandLine`	GET	Returns the running program's command line.
Revert a single logger to use log level provided in config`loggersRevertVerbosityLevelFor`	DELETE	Revert a single logger to use log level provided in config.
Revert the all loggers to use log level provided in config`loggersRevertVerbosityLevel`	DELETE	Revert the all loggers to use log level provided in config.
Rewrap`rewrap`	POST	Rotates a response-wrapped token.
Root token generation cancel`rootTokenGenerationCancel`	DELETE	Cancels any in-progress root generation attempt.
Root token generation cancel 2`rootTokenGenerationCancel2`	DELETE	Cancels any in-progress root generation attempt.
Root token generation initialize`rootTokenGenerationInitialize`	POST	Initializes a new root generation attempt.
Root token generation initialize 2`rootTokenGenerationInitialize2`	POST	Initializes a new root generation attempt.
Root token generation read progress`rootTokenGenerationReadProgress`	GET	Read the configuration and progress of the current root generation attempt.
Root token generation read progress2`rootTokenGenerationReadProgress2`	GET	Read the configuration and progress of the current root generation attempt.
Seal the Vault`seal`	POST	Seal the Vault.
Unlocks the user with given mount_accessor and alias_identifier`lockedUsersUnlock`	POST	Unlocks the user with given mount accessor and alias identifier
Unseal the Vault`unseal`	POST	Unseal the Vault.
Unwrap`unwrap`	POST	Unwraps a response-wrapped token.
Update the value of the key at the given path`rawWrite`	POST	Update the value of the key at the given path.
Validates the login for the given MFA methods`mfaValidate`	POST	Validates the login for the given MFA methods.
Well known list labels`wellKnownListLabels`	GET	List the registered well-known labels to associated mounts.
Well known list labels 2`wellKnownListLabels2`	GET	List the registered well-known labels to associated mounts.
Wrap`wrap`	POST	Response-wraps an arbitrary JSON object.

Terraform Cloud secrets10

Terraform cloud configure`terraformCloudConfigure`	POST	Configure the Terraform Cloud / Enterprise backend.
Terraform cloud delete configuration`terraformCloudDeleteConfiguration`	DELETE	Configure the Terraform Cloud / Enterprise backend.
Terraform cloud delete role`terraformCloudDeleteRole`	DELETE	Manages the Vault role for generating Terraform Cloud / Enterprise tokens.
Terraform cloud generate credentials`terraformCloudGenerateCredentials`	GET	Generate a Terraform Cloud or Enterprise API token from a specific Vault role.
Terraform cloud generate credentials2`terraformCloudGenerateCredentials2`	POST	Generate a Terraform Cloud or Enterprise API token from a specific Vault role.
Terraform cloud list roles`terraformCloudListRoles`	GET	List the existing roles in Terraform Cloud / Enterprise backend
Terraform cloud read configuration`terraformCloudReadConfiguration`	GET	Configure the Terraform Cloud / Enterprise backend.
Terraform cloud read role`terraformCloudReadRole`	GET	Manages the Vault role for generating Terraform Cloud / Enterprise tokens.
Terraform cloud rotate role`terraformCloudRotateRole`	POST	Request to rotate the credentials for a team or organization.
Terraform cloud write role`terraformCloudWriteRole`	POST	Manages the Vault role for generating Terraform Cloud / Enterprise tokens.

TLS certificate auth11

Cert configure`certConfigure`	POST	Vault POST /auth/{cert mount path}/config.
Cert delete certificate`certDeleteCertificate`	DELETE	Manage trusted certificates used for authentication.
Cert delete CRL`certDeleteCrl`	DELETE	Manage Certificate Revocation Lists checked during authentication.
Cert list certificates`certListCertificates`	GET	Manage trusted certificates used for authentication.
Cert list crls`certListCrls`	GET	Manage Certificate Revocation Lists checked during authentication.
Cert login`certLogin`	POST	Vault POST /auth/{cert mount path}/login.
Cert read certificate`certReadCertificate`	GET	Manage trusted certificates used for authentication.
Cert read configuration`certReadConfiguration`	GET	Vault GET /auth/{cert mount path}/config.
Cert read CRL`certReadCrl`	GET	Manage Certificate Revocation Lists checked during authentication.
Cert write certificate`certWriteCertificate`	POST	Manage trusted certificates used for authentication.
Cert write CRL`certWriteCrl`	POST	Manage Certificate Revocation Lists checked during authentication.

Tokens21

The token create path is used to create new orphan tokens`tokenCreateOrphan`	POST	The token create path is used to create new orphan tokens.
The token create path is used to create new tokens`tokenCreate`	POST	The token create path is used to create new tokens.
This endpoint lists configured roles`tokenListRoles`	GET	This endpoint lists configured roles.
This endpoint will delete the given token and all of its child tokens`tokenRevoke`	POST	This endpoint will delete the given token and all of its child tokens.
This endpoint will delete the token and orphan its child tokens`tokenRevokeOrphan`	POST	This endpoint will delete the token and orphan its child tokens.
This endpoint will delete the token used to call it and all of its child tokens`tokenRevokeSelf`	POST	This endpoint will delete the token used to call it and all of its child tokens.
This endpoint will lookup a token associated with the given accessor and its properties`tokenLookUpAccessor`	POST	This endpoint will lookup a token associated with the given accessor and its properties.
This endpoint will renew a token associated with the given accessor and its properties`tokenRenewAccessor`	POST	This endpoint will renew a token associated with the given accessor and its properties.
This endpoint will renew the given token and prevent expiration`tokenRenew`	POST	This endpoint will renew the given token and prevent expiration.
This endpoint will renew the token used to call it and prevent expiration`tokenRenewSelf`	POST	This endpoint will renew the token used to call it and prevent expiration.
This token create path is used to create new tokens adhering to the given role`tokenCreateAgainstRole`	POST	This token create path is used to create new tokens adhering to the given role.
Token delete role`tokenDeleteRole`	DELETE	Vault DELETE /auth/token/roles/{role name}.
Token list accessors`tokenListAccessors`	GET	List token accessors, which can then be be used to iterate and discover their properties or revoke them.
Token look up`tokenLookUp`	POST	This endpoint will lookup a token and its properties.
Token look up 2`tokenLookUp2`	GET	This endpoint will lookup a token and its properties.
Token look up self`tokenLookUpSelf`	GET	This endpoint will lookup a token and its properties.
Token look up self2`tokenLookUpSelf2`	POST	This endpoint will lookup a token and its properties.
Token read role`tokenReadRole`	GET	Vault GET /auth/token/roles/{role name}.
Token revoke accessor`tokenRevokeAccessor`	POST	This endpoint will delete the token associated with the accessor and all of its child tokens.
Token tidy`tokenTidy`	POST	This endpoint performs cleanup tasks that can be run if certain error conditions have occurred.
Token write role`tokenWriteRole`	POST	Vault POST /auth/token/roles/{role name}.

TOTP secrets6

Manage the keys that can be created with this backend`totpListKeys`	GET	Manage the keys that can be created with this backend.
TOTP create key`totpCreateKey`	POST	Manage the keys that can be created with this backend.
TOTP delete key`totpDeleteKey`	DELETE	Manage the keys that can be created with this backend.
TOTP generate code`totpGenerateCode`	GET	Request time-based one-time use password or validate a password for a certain key .
TOTP read key`totpReadKey`	GET	Manage the keys that can be created with this backend.
TOTP validate code`totpValidateCode`	POST	Request time-based one-time use password or validate a password for a certain key .

Transit secrets39

Backup the named key`transitBackUpKey`	GET	Backup the named key
Configure a named encryption key`transitConfigureKey`	POST	Configure a named encryption key
Configures a new cache of the specified size`transitConfigureCache`	POST	Configures a new cache of the specified size
Encrypt a plaintext value or a batch of plaintext blocks using a named key`transitEncrypt`	POST	Encrypt a plaintext value or a batch of plaintext blocks using a named key
Generate a data key`transitGenerateDataKey`	POST	Generate a data key
Imports an externally-generated key into a new transit key`transitImportKey`	POST	Imports an externally-generated key into a new transit key
Imports an externally-generated key into an existing imported key`transitImportKeyVersion`	POST	Imports an externally-generated key into an existing imported key
Managed named encryption keys`transitListKeys`	GET	Managed named encryption keys
Returns the public key to use for wrapping imported keys`transitReadWrappingKey`	GET	Returns the public key to use for wrapping imported keys
Returns the size of the active cache`transitReadCacheConfiguration`	GET	Returns the size of the active cache
Rewrap ciphertext`transitRewrap`	POST	Rewrap ciphertext
Rotate named encryption key`transitRotateKey`	POST	Rotate named encryption key
Transit byok key`transitByokKey`	GET	Securely export named encryption or signing key
Transit byok key version`transitByokKeyVersion`	GET	Securely export named encryption or signing key
Transit configure keys`transitConfigureKeys`	POST	Configuration common across all keys
Transit create key`transitCreateKey`	POST	Managed named encryption keys
Transit decrypt`transitDecrypt`	POST	Decrypt a ciphertext value using a named key
Transit delete key`transitDeleteKey`	DELETE	Managed named encryption keys
Transit export key`transitExportKey`	GET	Export named encryption or signing key
Transit export key version`transitExportKeyVersion`	GET	Export named encryption or signing key
Transit generate CSR for key`transitGenerateCsrForKey`	POST	Create a CSR from a key in transit
Transit generate hmac`transitGenerateHmac`	POST	Generate an HMAC for input data using the named key
Transit generate hmac with algorithm`transitGenerateHmacWithAlgorithm`	POST	Generate an HMAC for input data using the named key
Transit generate random`transitGenerateRandom`	POST	Generate random bytes
Transit generate random with bytes`transitGenerateRandomWithBytes`	POST	Generate random bytes
Transit generate random with source`transitGenerateRandomWithSource`	POST	Generate random bytes
Transit generate random with source and bytes`transitGenerateRandomWithSourceAndBytes`	POST	Generate random bytes
Transit hash`transitHash`	POST	Generate a hash sum for input data
Transit hash with algorithm`transitHashWithAlgorithm`	POST	Generate a hash sum for input data
Transit read key`transitReadKey`	GET	Managed named encryption keys
Transit read keys configuration`transitReadKeysConfiguration`	GET	Configuration common across all keys
Transit restore and rename key`transitRestoreAndRenameKey`	POST	Restore the named key
Transit restore key`transitRestoreKey`	POST	Restore the named key
Transit set certificate for key`transitSetCertificateForKey`	POST	Imports an externally-signed certificate chain into an existing key version
Transit sign`transitSign`	POST	Generate a signature for input data using the named key
Transit sign with algorithm`transitSignWithAlgorithm`	POST	Generate a signature for input data using the named key
Transit verify`transitVerify`	POST	Verify a signature or HMAC for input data created using the named key
Transit verify with algorithm`transitVerifyWithAlgorithm`	POST	Verify a signature or HMAC for input data created using the named key
Trim key versions of a named key`transitTrimKey`	POST	Trim key versions of a named key

Userpass auth7

Reset user's password`userpassResetPassword`	POST	Reset user's password.
Update the policies associated with the username`userpassUpdatePolicies`	POST	Update the policies associated with the username.
Userpass delete user`userpassDeleteUser`	DELETE	Manage users allowed to authenticate.
Userpass list users`userpassListUsers`	GET	Manage users allowed to authenticate.
Userpass login`userpassLogin`	POST	Log in with a username and password.
Userpass read user`userpassReadUser`	GET	Manage users allowed to authenticate.
Userpass write user`userpassWriteUser`	POST	Manage users allowed to authenticate.