OpenBao

OpenBao HTTP API

The OpenBao HTTP API gives full access to every OpenBao capability over REST-like HTTP verbs. All routes are prefixed with /v1/ and the API is versioned only at that prefix. Authentication is by client token, supplied either in the X-Vault-Token header or as an Authorization Bearer token; each auth method additionally exposes unauthenticated login endpoints. Namespaces are selected with the X-Vault-Namespace header or by full path. Requests and responses are JSON, LIST is used as an HTTP verb alongside GET/POST/PUT/PATCH/DELETE, and errors are returned in a common {"errors": [...]} envelope for any status >= 400.

GitHub

Documentation

📖
APIReference
https://openbao.org/docs/api/
📖
Documentation
https://openbao.org/docs/
📖
Authentication
https://raw.githubusercontent.com/api-evangelist/openbao/refs/heads/main/authentication/openbao-authentication.yml
📖
RateLimits
https://raw.githubusercontent.com/api-evangelist/openbao/refs/heads/main/rate-limits/openbao-rate-limits.yml

Other Resources

🔗
ErrorCatalog
https://raw.githubusercontent.com/api-evangelist/openbao/refs/heads/main/errors/openbao-problem-types.yml
🔗
Conventions
https://raw.githubusercontent.com/api-evangelist/openbao/refs/heads/main/conventions/openbao-conventions.yml
🔗
Idempotency
https://raw.githubusercontent.com/api-evangelist/openbao/refs/heads/main/conventions/openbao-conventions.yml
🔗
Webhooks
https://raw.githubusercontent.com/api-evangelist/openbao/refs/heads/main/asyncapi/openbao-audit-events.yml
🔗
APIsJSON
https://raw.githubusercontent.com/api-evangelist/openbao/refs/heads/main/apis.yml

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API 
curl "https://apis.io/api/v1/apis/openbao-http-api"
All apis 
curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

API entry from apis.yml

apis.yml Raw ↑ 
aid: openbao:openbao-http-api
name: OpenBao HTTP API
description: 'The OpenBao HTTP API gives full access to every OpenBao capability over REST-like HTTP verbs.
  All routes are prefixed with /v1/ and the API is versioned only at that prefix. Authentication is by
  client token, supplied either in the X-Vault-Token header or as an Authorization Bearer token; each
  auth method additionally exposes unauthenticated login endpoints. Namespaces are selected with the X-Vault-Namespace
  header or by full path. Requests and responses are JSON, LIST is used as an HTTP verb alongside GET/POST/PUT/PATCH/DELETE,
  and errors are returned in a common {"errors": [...]} envelope for any status >= 400.'
humanURL: https://openbao.org/docs/api/
baseURL: https://{bao_address}/v1
x-base-url-note: TEMPLATED ON PURPOSE - do not "repair" this to a concrete host. OpenBao is self-hosted
  software with no vendor-operated API endpoint, so there is no base URL for the project to publish and
  it publishes none. Its own documentation uses http://127.0.0.1:8200/v1 throughout, which is a local
  dev-mode instance rather than a service. {bao_address} is the address of whatever instance the operator
  runs, named after the BAO_ADDR environment variable the CLI and docs use. repair-api-bases.py reports
  verdict no-usable-base for this repo; that verdict is expected here and is a property of the delivery
  model, not a gap in the profile.
tags:
- Secrets Management
- Security
- Encryption
- PKI
properties:
- type: APIReference
  url: https://openbao.org/docs/api/
- type: Documentation
  url: https://openbao.org/docs/
- type: Authentication
  url: authentication/openbao-authentication.yml
- type: ErrorCatalog
  url: errors/openbao-problem-types.yml
- type: Conventions
  url: conventions/openbao-conventions.yml
- type: Idempotency
  url: conventions/openbao-conventions.yml
- type: RateLimits
  url: rate-limits/openbao-rate-limits.yml
- type: Webhooks
  url: asyncapi/openbao-audit-events.yml