---
title: "Create"
method: POST
path: "/api/v1/vaults"
tags: ["Vault"]
---

# Create

`POST /api/v1/vaults`

Create provisions a new external secret storage vault and returns it.

## Request body

- C1ApiVaultV1VaultServiceCreateRequest — VaultServiceCreateRequest is the request message for creating a new vault. This message contains a oneof named vault. Only a single field of the following list may be set at a time: - groupAuthzVault - magicVault
  - `description` string — A free-text description of the vault's purpose or configuration.
  - `displayName` string, required — The human-readable name for the new vault.
  - `groupAuthzVault` C1ApiVaultV1GroupAuthzVault, nullable — GroupAuthzVault configures a vault that uses group-based authorization to control access to stored credentials.
  - `magicVault` C1ApiVaultV1MagicVault, nullable — MagicVault configures a vault that grants time-limited credential access via magic links.
    - `allowUnauthedViews` boolean — Controls whether unauthenticated users can view credentials via a magic link.
    - `allowedViews` integer — The maximum number of times a credential in this vault may be viewed.
  - `ownerIds` string[], nullable — The IDs of users to assign as owners of this vault.

## Response `200`

VaultServiceCreateResponse is the response message for creating a new vault.

- C1ApiVaultV1VaultServiceCreateResponse — VaultServiceCreateResponse is the response message for creating a new vault.
  - `vault` C1ApiVaultV1Vault — Vault represents an external secret storage integration used to store connector credentials securely. This message contains a oneof named vault. Only a single field of the following list may be set at a time: - groupAuthzVault - magicVault
    - `createdAt` string, date-time
    - `credentialExpirationDuration` string, duration
    - `deletedAt` string, date-time
    - `description` string — A free-text description of the vault's purpose or configuration.
    - `displayName` string — The human-readable name of the vault.
    - `groupAuthzVault` C1ApiVaultV1GroupAuthzVault, nullable — GroupAuthzVault configures a vault that uses group-based authorization to control access to stored credentials.
    - `id` string — The unique identifier of the vault.
    - `magicVault` C1ApiVaultV1MagicVault, nullable — MagicVault configures a vault that grants time-limited credential access via magic links.
      - `allowUnauthedViews` boolean — Controls whether unauthenticated users can view credentials via a magic link.
      - `allowedViews` integer — The maximum number of times a credential in this vault may be viewed.
    - `updatedAt` string, date-time

---

[API](https://skmtc.net/conductorone/apis/c1-api.md) · [All operations](https://skmtc.net/conductorone/apis/c1-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/conductorone/c1-api/versions/d391405a35d3/schema)