# run402-com Vault API

**Canonical:** https://apis.io/apis/run402-com/run402-com-vault-api/  
**Provider:** run402-com — https://apis.io/providers/run402-com/  
**Base URL:** https://api.run402.com  
**Documentation:** https://docs.run402.com/

run402-com Vault API is one of 43 APIs that [run402-com](https://apis.io/providers/run402-com/) publishes on the [APIs.io](https://apis.io/) network, described by a machine-readable OpenAPI specification. This API exposes 6 JSON Schema definitions. Tagged areas include vault. The published artifact set on APIs.io includes an OpenAPI specification and 6 JSON Schemas.

The vault API from run402-com — 45 operation(s) for vault.

## Operations (50)

| Method | Path | Summary |
|---|---|---|
| GET | `/vaults/v1/repos` | List vault-backed repos for the signed-in principal |
| POST | `/vaults/v1` | Allocate the project's vault, or push-to-create it (owner / org member) |
| GET | `/vaults/v1` | Find a project's vault by project_id/repo address, or list every vault in an org |
| GET | `/vaults/v1/{vault_id}` | Read the vault record |
| POST | `/vaults/v1/{vault_id}/handoffs` | Mint a Handoff Key |
| GET | `/vaults/v1/{vault_id}/handoffs` | List a vault's handoffs |
| DELETE | `/vaults/v1/{vault_id}/handoffs/{handoff_id}` | Revoke a handoff |
| POST | `/vaults/v1/handoffs/{handoff_id}/redeem` | Redeem a Handoff Key |
| POST | `/vaults/v1/{vault_id}/invites` | Mint an Invite Key |
| GET | `/vaults/v1/{vault_id}/invites` | List a vault's invites |
| DELETE | `/vaults/v1/{vault_id}/invites/{invite_id}` | Revoke an invite |
| POST | `/vaults/v1/invites/{invite_id}/redeem` | Redeem an Invite Key |
| GET | `/vaults/v1/{vault_id}/state` | Read the composite pin-current state in one call |
| POST | `/vaults/v1/{vault_id}/allocations/reclaim` | Reclaim a stalled allocation (owner-only) |
| GET | `/vaults/v1/{vault_id}/heads` | List heads above your pin |
| GET | `/vaults/v1/{vault_id}/heads/{generation}` | Read one head's exact stored bytes |
| POST | `/vaults/v1/{vault_id}/head-reads` | Read many heads' exact stored bytes in one call |
| GET | `/vaults/v1/{vault_id}/admissions/{generation}` | Read one admission record's exact stored bytes |
| POST | `/vaults/v1/{vault_id}/object-reads` | Presign reads for stored objects |
| POST | `/vaults/v1/{vault_id}/object-reads/bytes` | Read one stored object's exact bytes through the gateway |
| GET | `/vaults/v1/{vault_id}/objects` | List every stored object in the vault |
| GET | `/vaults/v1/{vault_id}/envelope-recipients` | List the fingerprints currently covered by this vault's key envelopes, plus the… |
| POST | `/vaults/v1/{vault_id}/upload-sessions` | Open an upload session, or upload small objects inline in one call |
| GET | `/vaults/v1/{vault_id}/upload-sessions/{upload_session_id}` | Read an upload session (redacted) |
| DELETE | `/vaults/v1/{vault_id}/upload-sessions/{upload_session_id}` | Abort an upload session (redact) |
| POST | `/vaults/v1/{vault_id}/upload-sessions/{upload_session_id}/finalize` | Finalize an upload session |
| POST | `/vaults/v1/{vault_id}/maintenance-leases` | Acquire the maintenance lease (owner-only) |
| POST | `/vaults/v1/{vault_id}/maintenance-leases/{maintenance_lease_id}/heartbeat` | Renew the maintenance lease |
| DELETE | `/vaults/v1/{vault_id}/maintenance-leases/{maintenance_lease_id}` | Release the maintenance lease |
| POST | `/vaults/v1/{vault_id}/compaction-grant` | Open a bounded compaction headroom grant |
| DELETE | `/vaults/v1/{vault_id}/compaction-grant` | Close the compaction headroom grant (idempotent) |
| POST | `/vaults/v1/{vault_id}/repair-attempts` | Open the repair resource lane (owner + step-up) |
| PATCH | `/vaults/v1/{vault_id}/policy` | Set the project's vault policy (owner + step-up) |
| POST | `/vaults/v1/{vault_id}/override-completions` | Close an unvaulted-deploy advisory |
| POST | `/vaults/v1/{vault_id}/rotation-attempts` | Create a rotation_attempt_descriptor (writer) |
| POST | `/vaults/v1/{vault_id}/recipients/{principal_id}/confirm` | First-seen pin confirmation (owner + step-up) |
| GET | `/vaults/v1/{vault_id}/recipients/{principal_id}` | Recipient pin status (owner + step-up) |
| POST | `/vaults/v1/{vault_id}/recipients/{principal_id}/proof-of-open` | Submit a recipient proof-of-open (rev 44 D210) |
| POST | `/vaults/v1/{vault_id}/recipients/{principal_id}/repin` | Re-pin ceremony (owner + step-up) |
| POST | `/vaults/v1/{vault_id}/recipients/{principal_id}/key-revocation` | Declare a recipient key revoked (owner + step-up) |
| POST | `/vaults/v1/{vault_id}/epoch-secret-exposure` | Declare this vault's epoch secret exposed (owner + step-up) |
| POST | `/vaults/v1/{vault_id}/writers/retire-previous-owner` | Retire a previous owner's vault writers after a project transfer (owner +… |
| POST | `/vaults/v1/{vault_id}/writer-authority/declare-unavailable` | Declare the writer signing key unavailable (owner + step-up) |
| POST | `/vaults/v1/{vault_id}/admissions` | Admit a signed head (the push) |
| POST | `/vaults/v1/{vault_id}/retention-cutoffs` | Mint a retention cutoff ticket |
| POST | `/vaults/v1/{vault_id}/activation-tokens` | Exchange a capture receipt for an activation token |
| POST | `/vaults/v1/{vault_id}/maintenance/open` | Open a maintenance cycle (owner) |
| POST | `/vaults/v1/{vault_id}/maintenance/abort` | Abort a maintenance cycle before its first checkpoint (owner) |
| POST | `/vaults/v1/{vault_id}/prune-intents` | Submit a prune intent (owner) |
| GET | `/vaults/v1/{vault_id}/prune-intents/{prune_intent_object_id}` | Read a prune intent (owner) |

## Machine-readable artifacts (7)

- **OpenAPI** — https://artifacts.apis.io/run402-com/openapi/run402-com-vault-api-openapi.yml
- **JSONSchema** — https://artifacts.apis.io/run402-com/json-schema/run402-com-project-transfer-preview-schema.json
- **JSONSchema** — https://artifacts.apis.io/run402-com/json-schema/run402-com-deploy-plan-response-schema.json
- **JSONSchema** — https://artifacts.apis.io/run402-com/json-schema/run402-com-stable-host-resolve-response-schema.json
- **JSONSchema** — https://artifacts.apis.io/run402-com/json-schema/run402-com-release-inventory-schema.json
- **JSONSchema** — https://artifacts.apis.io/run402-com/json-schema/run402-com-mailbox-schema.json
- **JSONSchema** — https://artifacts.apis.io/run402-com/json-schema/run402-com-project-event-feed-page-schema.json

## Other run402-com APIs (12)

- [run402-com Admin API](https://apis.io/apis/run402-com/run402-com-admin-api/)
- [run402-com Agent API](https://apis.io/apis/run402-com/run402-com-agent-api/)
- [run402-com Agent Messaging API](https://apis.io/apis/run402-com/run402-com-agentmessaging-api/)
- [run402-com AI API](https://apis.io/apis/run402-com/run402-com-ai-api/)
- [run402-com App Repos API](https://apis.io/apis/run402-com/run402-com-app-repos-api/)
- [run402-com Apply API](https://apis.io/apis/run402-com/run402-com-apply-api/)
- [run402-com Auth API](https://apis.io/apis/run402-com/run402-com-auth-api/)
- [run402-com Billing API](https://apis.io/apis/run402-com/run402-com-billing-api/)
- [run402-com Buzz Control Plane API](https://apis.io/apis/run402-com/run402-com-buzz-control-plane-api/)
- [run402-com CI Federation API](https://apis.io/apis/run402-com/run402-com-ci-federation-api/)
- [run402-com Console API](https://apis.io/apis/run402-com/run402-com-console-api/)
- [run402-com Content API](https://apis.io/apis/run402-com/run402-com-content-api/)

## Tags

vault

---

Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/apis/run402-com/run402-com-vault-api/). The API's provider profile, Kin Score and agent-readiness rating are at https://apis.io/providers/run402-com/.