> ## Documentation Index > Fetch the complete documentation index at: https://docs.cloudcruise.com/llms.txt > Use this file to discover all available pages before exploring further. # Delete vault entry > Deletes a vault entry from the CloudCruise Platform using domain and permissioned user ID. ## OpenAPI ````yaml vault-api/vault-api.yaml delete /vault openapi: 3.1.0 info: title: CloudCruise Vault API version: 0.1.0 description: Endpoints for managing vault entries. servers: - url: https://api.cloudcruise.com description: CloudCruise Platform Production API Server security: - AuthScheme: [] paths: /vault: delete: summary: Delete vault entry description: >- Deletes a vault entry from the CloudCruise Platform using domain and permissioned user ID. operationId: vault_delete requestBody: required: true content: application/json: schema: $ref: '#/components/schemas/VaultDeleteRequest' responses: '200': description: Vault entry successfully deleted content: application/json: schema: $ref: '#/components/schemas/VaultEntry' '400': description: >- Invalid request. Missing required fields (permissioned_user_id, domain) or authentication headers. content: application/json: schema: $ref: '#/components/schemas/ErrorResponse' example: statusCode: 400 message: Invalid request error: Bad Request '401': description: Unauthorized. Missing or invalid API key. content: application/json: schema: $ref: '#/components/schemas/ErrorResponse' example: statusCode: 401 message: Unauthorized error: Unauthorized '404': description: >- Credential not found. No vault entry exists with the given permissioned_user_id and domain in this workspace. content: application/json: schema: $ref: '#/components/schemas/ErrorResponse' example: statusCode: 404 message: Credential not found error: Not Found '500': description: Internal server error content: application/json: schema: $ref: '#/components/schemas/ErrorResponse' example: statusCode: 500 message: Internal server error error: Internal Server Error components: schemas: VaultDeleteRequest: type: object description: Request payload for deleting a vault entry properties: domain: type: string description: Target domain for the vault entry to delete permissioned_user_id: type: string description: Unique identifier for the vault entry to delete required: - domain - permissioned_user_id VaultEntry: type: object description: Complete vault entry including system-generated fields properties: id: type: string format: uuid description: System-generated unique identifier for the vault entry permissioned_user_id: type: string description: >- Unique identifier for referencing this vault entry in workflow executions user_name: type: string nullable: true description: Encrypted username password: type: string nullable: true description: Encrypted password domain: type: string description: Target domain for vault entry credentials user_alias: type: string nullable: true description: Human readable identifier tfa_secret: type: string nullable: true description: >- Two-factor authenticator secret key (TOTP). Required when tfa_method is AUTHENTICATOR. This should be encrypted with your encryption key prior to sending to the API, similar to other credentials. The secret is typically provided in base32 format from authenticator apps. tfa_method: type: string enum: - AUTHENTICATOR - EMAIL - MAGIC_LINK - SMS nullable: true description: Two-factor authentication method tfa_email: type: string nullable: true description: >- Computed email address for TFA codes when tfa_method is EMAIL. CloudCruise generates this as info+{permissioned_user_id}+{site_identifier}@cloudcruise.com, where site_identifier is derived from the vault entry domain. This field is read-only and cannot be set via the API. tfa_phone_number: type: string nullable: true description: >- Computed phone number for TFA codes when tfa_method is SMS. This is automatically determined based on workspace configuration or defaults to CloudCruise's default phone number. This field is read-only and cannot be set via the API. workspace_id: type: string format: uuid description: The workspace this vault entry belongs to user_id: type: string format: uuid nullable: true description: The user who created this vault entry created_at: type: string format: date-time nullable: true description: Timestamp when the vault entry was created updated_at: type: string format: date-time nullable: true description: Timestamp when the vault entry was last updated session_storage: type: object nullable: true description: Session storage data default: {} local_storage: type: object nullable: true description: Local storage data default: {} cookies: type: array nullable: true items: $ref: '#/components/schemas/Cookie' description: Active vault entry cookies persist_local_storage: type: boolean description: Whether to maintain local storage across sessions persist_cookies: type: boolean description: Whether to maintain cookies across sessions persist_session_storage: type: boolean description: Whether to maintain session storage across sessions skip_csrf_cookies: type: boolean description: >- Whether to skip injecting CSRF-related cookies (e.g. XSRF-TOKEN) during session restore, allowing the server to generate fresh tokens cookie_domain_to_store: type: string nullable: true description: Specific domain to use when storing cookies allow_multiple_sessions: type: boolean description: Whether to allow multiple concurrent sessions max_concurrency: type: integer nullable: true description: Maximum number of concurrent sessions allowed (null for unlimited) prevent_concurrency_during_login: type: boolean nullable: true description: >- Whether to prevent other sessions from starting while login is in progress expiry_time_from_last_use: type: string nullable: true description: >- Session expiry interval from last activity (e.g., "01:30:00" for 1.5 hours). Set to null for no expiry from last use. expiry_time_from_session_data_set: type: string nullable: true description: >- Session expiry interval from creation (e.g., "7 days 00:00:00" for 7 days). Set to null for no expiry from session data set. effective_expires_at: type: string format: date-time nullable: true description: >- Computed timestamp when the session data expires based on expiry settings session_data_set_at: type: string format: date-time nullable: true description: Timestamp when the session data (cookies, storage) was last set ip_address: type: string nullable: true description: >- Legacy field for target IP address (deprecated, use proxy.target_ip instead) location: type: string nullable: true description: Geographic location associated with this vault entry proxy_string: type: string nullable: true description: >- The assigned proxy connection string for this vault entry. This is automatically assigned based on the proxy configuration provided when creating/updating the entry. Format: ip:port (e.g., "91.124.2.237:61234") proxy_setting: type: string enum: - random - static - country - custom nullable: true description: >- The proxy mode for this vault entry. - `random` / `static` / `country`: use CloudCruise's managed proxy pool. - `custom`: use the bring-your-own proxy URL stored in `proxy_value` (Enterprise only). proxy_value: type: string nullable: true description: >- The proxy selector for this entry, interpreted per `proxy_setting`. Not set for `random`. - `static`: the target IP address (plaintext). - `country`: the country code (plaintext). - `custom`: the bring-your-own proxy URL, returned encrypted with the workspace's AES-256 key (the same scheme as `password`). Decrypt it client-side with your key. secret_provider_id: type: string format: uuid nullable: true description: >- The external secret provider connection this entry is bound to (e.g. 1Password), or null for a directly-stored credential. When set, `user_name`/`password` are null and resolved live at run time. secret_ref: type: string nullable: true description: >- Reference to the bound item within the secret provider (e.g. `op:///` for 1Password). Null unless `secret_provider_id` is set. secret_cache_ttl_seconds: type: integer nullable: true description: >- Per-entry override for how long resolved secrets are cached (seconds), or null to use the connection default. ErrorResponse: type: object description: Error response returned when a request fails properties: statusCode: type: integer description: HTTP status code message: type: string description: Human-readable error message error: type: string description: HTTP status text (e.g., "Not Found", "Conflict") required: - statusCode - message Cookie: type: object description: >- Detailed cookie configuration for authentication persistence. Includes all standard cookie attributes and security settings. properties: name: type: string description: Cookie name/identifier value: type: string description: Cookie value/content domain: type: string description: Domain scope for the cookie path: type: string description: URL path scope for the cookie expirationDate: type: number format: float nullable: true description: Unix timestamp (in seconds) when the cookie expires httpOnly: type: boolean description: Restricts cookie access to HTTP(S) protocol only hostOnly: type: boolean description: Limits cookie to exact hostname matches only secure: type: boolean description: Requires HTTPS for cookie transmission session: type: boolean description: Indicates if this is a session cookie (cleared on browser close) storeId: type: string description: Browser cookie store identifier sameSite: type: string description: Cross-site request policy for the cookie required: - name - value - domain - path - httpOnly - hostOnly - secure - session - storeId - sameSite securitySchemes: AuthScheme: type: apiKey name: cc-key in: header description: >- API key-based authentication. Provide your CloudCruise API key in the cc-key header. ````