Keys & Secrets API

​

API Sections

​

JWKs (JSON Web Keys)

• List JWKs - Get all JWKs for a project
• Get JWK - Get a specific JWK
• Create JWK - Create a new JWK
• Update JWK - Update an existing JWK
• Delete JWK - Delete a JWK
• Generate JWK - Generate a new JWK
• Parse JWK from URL - Parse and create JWK from URL
• Parse JWK from Clipboard - Parse and create JWK from JSON string
• Parse JWK from Certificate - Parse and create JWK from certificate
• Parse JWK from Key - Parse and create JWK from key
• Parse JWK from Keystore - Parse and create JWK from keystore

​

Keystores

• List Keystores - Get all keystores for a project
• Get Keystore - Get a specific keystore
• Create Keystore - Create a new keystore (use update endpoint with POST method)
• Update Keystore - Update an existing keystore
• Delete Keystore - Delete a keystore

​

Keys (Crypto Keys)

• List Keys - Get all keys for a project
• Get Key - Get a specific key
• Create Key - Create a new key
• Update Key - Update an existing key
• Delete Key - Delete a key

​

Certificates

• List Certificates - Get all certificates for a project
• Get Certificate - Get a specific certificate
• Create Certificate - Create a new certificate
• Update Certificate - Update an existing certificate
• Delete Certificate - Delete a certificate
• Export Certificate - Export certificate as ZIP file
• Get Truststore Certificates - Get certificates from environment truststore

​

Authentication

​

Permissions

​

GET Operations (List/Get Certificate/Key/Keystore/JWK)

• User must have SECRETS + VIEW permission in the project
• If the asset category does not exist, user must have at least one permission in the project

​

POST/PUT/DELETE Operations (Create/Update/Delete Certificate/Key/Keystore/JWK)

• User must have SECRETS + MANAGE permission in the project
• For deployment operations (when deploying certificates to environments), user must also have SECRETS + DEPLOY_UNDEPLOY permission

​

Permission Requirements

​

Related Documentation

• Authentication Guide - How to obtain and use API tokens
• Error Handling - Error response formats