Very Good Security

Very Good Security (VGS) is a data security and tokenization platform that lets companies collect, protect, and exchange sensitive data (cards, PII, bank accounts, credentials) without it touching their own systems, reducing PCI DSS and compliance scope. The platform exposes a Vault HTTP API for tokenization (aliases / redact / reveal), an Accounts management API for vaults, routes, and organizations, and a forward/reverse Proxy that aliases and de-aliases data in transit.

5 APIs 0 Features

SecurityTokenizationData PrivacyPCI ComplianceVault

APIs

VGS Vault Tokenization API

The VGS Vault HTTP API stores, retrieves, and manages sensitive values as aliases (tokens). Create aliases by value or by reference, reveal single or multiple aliases, update da...

VGS Accounts Management API

The VGS Accounts / control plane API administers organizations and vaults, reads account and access-log details, and manages the resources behind the platform. Authenticated wit...

VGS Routes & Proxy API

Manage inbound (reverse) and outbound (forward) proxy routes that redact and reveal sensitive data in transit. Routes are CRUD-managed through the Accounts API and applied to a ...

VGS Functions API

VGS Compute Functions run custom code inside the VGS security boundary to transform sensitive payloads (for example reformatting, enrichment, or custom tokenization) as part of ...

VGS Organizations API

Read organization details, members, vault assignments, and tenant access logs through the VGS Accounts control plane, governed by service-account scopes (organizations:read, acc...

Collections

Very Good Security (VGS) API

OPEN

Pricing Plans

Vgs Plans Pricing

3 plans

PLANS

Rate Limits

Vgs Rate Limits

4 limits

RATE LIMITS

FinOps

Vgs Finops

FINOPS

Resources

👥

GitHubOrganization

Sources

opencollection: 1.0.0
info:
  name: Very Good Security (VGS) API
  version: '1.0'
request:
  auth:
    type: basic
    username: '{{username}}'
    password: '{{password}}'
items:
- info:
    name: Aliases (Vault API)
    type: folder
  items:
  - info:
      name: Create aliases
      type: http
    http:
      method: POST
      url: https://api.sandbox.verygoodvault.com/aliases
      body:
        type: json
        data: "{\n  \"data\": [\n    {\n      \"value\": \"122105155\",\n      \"classifiers\": [\"bank-account\"],\n    \
          \  \"format\": \"UUID\",\n      \"storage\": \"PERSISTENT\"\n    }\n  ]\n}"
    docs: Stores multiple values at once and returns their aliases.
  - info:
      name: Reveal multiple aliases
      type: http
    http:
      method: GET
      url: https://api.sandbox.verygoodvault.com/aliases?q=tok_sandbox_5UpnbMvaihRuRwz5QXwBFw,tok_sandbox_9ToiJHedw1nE1Jfx1qYYgz
    docs: Given a list of aliases, retrieves all associated values. Disabled by default.
  - info:
      name: Reveal single alias
      type: http
    http:
      method: GET
      url: https://api.sandbox.verygoodvault.com/aliases/{{alias}}
    docs: Retrieves a stored value along with its aliases. Disabled by default.
  - info:
      name: Update data classifiers
      type: http
    http:
      method: PUT
      url: https://api.sandbox.verygoodvault.com/aliases/{{alias}}
      body:
        type: json
        data: "{\n  \"data\": {\n    \"classifiers\": [\"credit-cards\", \"PII\"]\n  }\n}"
    docs: Apply new classifiers to the value the alias is associated with.
  - info:
      name: Delete alias
      type: http
    http:
      method: DELETE
      url: https://api.sandbox.verygoodvault.com/aliases/{{alias}}
    docs: Removes a single alias.
- info:
    name: Accounts (Control Plane)
    type: folder
  items:
  - info:
      name: List organizations
      type: http
    http:
      method: GET
      url: https://accounts.apps.verygoodsecurity.com/organizations
      auth:
        type: bearer
        token: '{{bearerToken}}'
    docs: Reads organization details (organizations:read scope).
  - info:
      name: List vaults
      type: http
    http:
      method: GET
      url: https://accounts.apps.verygoodsecurity.com/vaults
      auth:
        type: bearer
        token: '{{bearerToken}}'
    docs: Lists vaults in the organization (vaults:read scope).
  - info:
      name: Create vault
      type: http
    http:
      method: POST
      url: https://accounts.apps.verygoodsecurity.com/vaults
      auth:
        type: bearer
        token: '{{bearerToken}}'
      body:
        type: json
        data: "{\n  \"name\": \"My Vault\",\n  \"environment\": \"SANDBOX\"\n}"
    docs: Creates a new vault (vaults:write scope).
  - info:
      name: List routes
      type: http
    http:
      method: GET
      url: https://accounts.apps.verygoodsecurity.com/vaults/{{vaultId}}/routes
      auth:
        type: bearer
        token: '{{bearerToken}}'
    docs: Lists inbound and outbound proxy routes on the vault (routes:read scope).
  - info:
      name: Create route
      type: http
    http:
      method: POST
      url: https://accounts.apps.verygoodsecurity.com/vaults/{{vaultId}}/routes
      auth:
        type: bearer
        token: '{{bearerToken}}'
      body:
        type: json
        data: "{\n  \"type\": \"OUTBOUND\",\n  \"protocol\": \"HTTP\",\n  \"host_endpoint\": \"api.example.com\"\n}"
    docs: Creates an inbound or outbound proxy route (routes:write scope).