HashiCorp · Capability

HashiCorp Vault API — System

HashiCorp Vault API — System. 149 operations. Lead operation: HashiCorp List the enabled audit devices.. Self-contained Naftiko capability covering one Hashicorp business surface.

Run with Naftiko HashicorpSystem

What You Can Do

GET
Getsysaudit — HashiCorp List the enabled audit devices.
/v1/sys/audit
POST
Postsysaudithashpath — HashiCorp The hash of the given string via the given audit backend
/v1/sys/audit-hash/{path}
POST
Postsysauditpath — HashiCorp Enable a new audit device at the supplied path.
/v1/sys/audit/{path}
DELETE
Deletesysauditpath — HashiCorp Disable the audit device at the given path.
/v1/sys/audit/{path}
GET
Getsysauth — HashiCorp List the currently enabled credential backends.
/v1/sys/auth
POST
Postsysauthpath — HashiCorp Enables a new auth method.
/v1/sys/auth/{path}
DELETE
Deletesysauthpath — HashiCorp Disable the auth method at the given auth path
/v1/sys/auth/{path}
GET
Getsysauthpathtune — HashiCorp Reads the given auth path's configuration.
/v1/sys/auth/{path}/tune
POST
Postsysauthpathtune — HashiCorp Tune configuration parameters for a given auth path.
/v1/sys/auth/{path}/tune
POST
Postsyscapabilities — HashiCorp Fetches the capabilities of the given token on the given path.
/v1/sys/capabilities
POST
Postsyscapabilitiesaccessor — HashiCorp Fetches the capabilities of the token associated with the given token, on the given path.
/v1/sys/capabilities-accessor
POST
Postsyscapabilitiesself — HashiCorp Fetches the capabilities of the given token on the given path.
/v1/sys/capabilities-self
GET
Getsysconfigauditingrequestheaders — HashiCorp List the request headers that are configured to be audited.
/v1/sys/config/auditing/request-headers
GET
Getsysconfigauditingrequestheadersheader — HashiCorp List the information for the given request header.
/v1/sys/config/auditing/request-headers/{header}
POST
Postsysconfigauditingrequestheadersheader — HashiCorp Enable auditing of a header.
/v1/sys/config/auditing/request-headers/{header}
DELETE
Deletesysconfigauditingrequestheadersheader — HashiCorp Disable auditing of the given request header.
/v1/sys/config/auditing/request-headers/{header}
GET
Getsysconfigcors — HashiCorp Return the current CORS settings.
/v1/sys/config/cors
POST
Postsysconfigcors — HashiCorp Configure the CORS settings.
/v1/sys/config/cors
DELETE
Deletesysconfigcors — HashiCorp Remove any CORS settings.
/v1/sys/config/cors
POST
Postsysconfigreloadsubsystem — HashiCorp Reload the given subsystem
/v1/sys/config/reload/{subsystem}
GET
Getsysconfigstatesanitized — HashiCorp Return a sanitized version of the Vault server configuration.
/v1/sys/config/state/sanitized
GET
Getsysconfiguiheaders — HashiCorp Return a list of configured UI headers.
/v1/sys/config/ui/headers
GET
Getsysconfiguiheadersheader — HashiCorp Return the given UI header's configuration
/v1/sys/config/ui/headers/{header}
POST
Postsysconfiguiheadersheader — HashiCorp Configure the values to be returned for the UI header.
/v1/sys/config/ui/headers/{header}
DELETE
Deletesysconfiguiheadersheader — HashiCorp Remove a UI header.
/v1/sys/config/ui/headers/{header}
GET
Getsysgenerateroot — HashiCorp Read the configuration and progress of the current root generation attempt.
/v1/sys/generate-root
POST
Postsysgenerateroot — HashiCorp Initializes a new root generation attempt.
/v1/sys/generate-root
DELETE
Deletesysgenerateroot — HashiCorp Cancels any in-progress root generation attempt.
/v1/sys/generate-root
GET
Getsysgeneraterootattempt — HashiCorp Read the configuration and progress of the current root generation attempt.
/v1/sys/generate-root/attempt
POST
Postsysgeneraterootattempt — HashiCorp Initializes a new root generation attempt.
/v1/sys/generate-root/attempt
DELETE
Deletesysgeneraterootattempt — HashiCorp Cancels any in-progress root generation attempt.
/v1/sys/generate-root/attempt
POST
Postsysgeneraterootupdate — HashiCorp Enter a single master key share to progress the root generation attempt.
/v1/sys/generate-root/update
GET
Getsyshealth — HashiCorp Returns the health status of Vault.
/v1/sys/health
GET
Getsyshostinfo — HashiCorp Information about the host instance that this Vault server is running on.
/v1/sys/host-info
GET
Getsysinit — HashiCorp Returns the initialization status of Vault.
/v1/sys/init
POST
Postsysinit — HashiCorp Initialize a new Vault.
/v1/sys/init
GET
Getsysinternalcountersactivity — HashiCorp Report the client count metrics, for this namespace and all child namespaces.
/v1/sys/internal/counters/activity
GET
Getsysinternalcountersactivitymonthly — HashiCorp Report the number of clients for this month, for this namespace and all child namespaces.
/v1/sys/internal/counters/activity/monthly
GET
Getsysinternalcountersconfig — HashiCorp Read the client count tracking configuration.
/v1/sys/internal/counters/config
POST
Postsysinternalcountersconfig — HashiCorp Enable or disable collection of client count, set retention period, or set default reporting period.
/v1/sys/internal/counters/config
GET
Getsysinternalcountersentities — HashiCorp Backwards compatibility is not guaranteed for this API
/v1/sys/internal/counters/entities
GET
Getsysinternalcountersrequests — HashiCorp Backwards compatibility is not guaranteed for this API
/v1/sys/internal/counters/requests
GET
Getsysinternalcounterstokens — HashiCorp Backwards compatibility is not guaranteed for this API
/v1/sys/internal/counters/tokens
GET
Getsysinternalspecsopenapi — HashiCorp Generate an OpenAPI 3 document of all mounted paths.
/v1/sys/internal/specs/openapi
GET
Getsysinternaluifeatureflags — HashiCorp Lists enabled feature flags.
/v1/sys/internal/ui/feature-flags
GET
Getsysinternaluimounts — HashiCorp Lists all enabled and visible auth and secrets mounts.
/v1/sys/internal/ui/mounts
GET
Getsysinternaluimountspath — HashiCorp Return information about the given mount.
/v1/sys/internal/ui/mounts/{path}
GET
Getsysinternaluinamespaces — HashiCorp Backwards compatibility is not guaranteed for this API
/v1/sys/internal/ui/namespaces
GET
Getsysinternaluiresultantacl — HashiCorp Backwards compatibility is not guaranteed for this API
/v1/sys/internal/ui/resultant-acl
GET
Getsyskeystatus — HashiCorp Provides information about the backend encryption key.
/v1/sys/key-status
GET
Getsysleader — HashiCorp Returns the high availability status and current leader instance of Vault.
/v1/sys/leader
GET
Getsysleases — HashiCorp List leases associated with this Vault cluster
/v1/sys/leases
GET
Getsysleasescount — HashiCorp Count of leases associated with this Vault cluster
/v1/sys/leases/count
POST
Postsysleaseslookup — HashiCorp Retrieve lease metadata.
/v1/sys/leases/lookup
GET
Getsysleaseslookup — HashiCorp Returns a list of lease ids.
/v1/sys/leases/lookup
GET
Getsysleaseslookupprefix — HashiCorp Returns a list of lease ids.
/v1/sys/leases/lookup/{prefix}
POST
Postsysleasesrenew — HashiCorp Renews a lease, requesting to extend the lease.
/v1/sys/leases/renew
POST
Postsysleasesrenewurlleaseid — HashiCorp Renews a lease, requesting to extend the lease.
/v1/sys/leases/renew/{url-lease-id}
POST
Postsysleasesrevoke — HashiCorp Revokes a lease immediately.
/v1/sys/leases/revoke
POST
Postsysleasesrevokeforceprefix — HashiCorp Revokes all secrets or tokens generated under a given prefix immediately
/v1/sys/leases/revoke-force/{prefix}
POST
Postsysleasesrevokeprefixprefix — HashiCorp Revokes all secrets (via a lease ID prefix) or tokens (via the tokens' path property) generated under a given prefix immediately.
/v1/sys/leases/revoke-prefix/{prefix}
POST
Postsysleasesrevokeurlleaseid — HashiCorp Revokes a lease immediately.
/v1/sys/leases/revoke/{url-lease-id}
POST
Postsysleasestidy — HashiCorp This endpoint performs cleanup tasks that can be run if certain error
/v1/sys/leases/tidy
GET
Getsysmetrics — HashiCorp Export the metrics aggregated for telemetry purpose.
/v1/sys/metrics
GET
Getsysmonitor — getsysmonitor
/v1/sys/monitor
GET
Getsysmounts — HashiCorp List the currently mounted backends.
/v1/sys/mounts
POST
Postsysmountspath — HashiCorp Enable a new secrets engine at the given path.
/v1/sys/mounts/{path}
DELETE
Deletesysmountspath — HashiCorp Disable the mount point specified at the given path.
/v1/sys/mounts/{path}
GET
Getsysmountspathtune — HashiCorp Tune backend configuration parameters for this mount.
/v1/sys/mounts/{path}/tune
POST
Postsysmountspathtune — HashiCorp Tune backend configuration parameters for this mount.
/v1/sys/mounts/{path}/tune
GET
Getsyspluginscatalog — HashiCorp Lists all the plugins known to Vault
/v1/sys/plugins/catalog
GET
Getsyspluginscatalogname — HashiCorp Return the configuration data for the plugin with the given name.
/v1/sys/plugins/catalog/{name}
POST
Postsyspluginscatalogname — HashiCorp Register a new plugin, or updates an existing one with the supplied name.
/v1/sys/plugins/catalog/{name}
DELETE
Deletesyspluginscatalogname — HashiCorp Remove the plugin with the given name.
/v1/sys/plugins/catalog/{name}
GET
Getsyspluginscatalogtype — HashiCorp List the plugins in the catalog.
/v1/sys/plugins/catalog/{type}
GET
Getsyspluginscatalogtypename — HashiCorp Return the configuration data for the plugin with the given name.
/v1/sys/plugins/catalog/{type}/{name}
POST
Postsyspluginscatalogtypename — HashiCorp Register a new plugin, or updates an existing one with the supplied name.
/v1/sys/plugins/catalog/{type}/{name}
DELETE
Deletesyspluginscatalogtypename — HashiCorp Remove the plugin with the given name.
/v1/sys/plugins/catalog/{type}/{name}
POST
Postsyspluginsreloadbackend — HashiCorp Reload mounted plugin backends.
/v1/sys/plugins/reload/backend
GET
Getsyspoliciesacl — HashiCorp List the configured access control policies.
/v1/sys/policies/acl
GET
Getsyspoliciesaclname — HashiCorp Retrieve information about the named ACL policy.
/v1/sys/policies/acl/{name}
POST
Postsyspoliciesaclname — HashiCorp Add a new or update an existing ACL policy.
/v1/sys/policies/acl/{name}
DELETE
Deletesyspoliciesaclname — HashiCorp Delete the ACL policy with the given name.
/v1/sys/policies/acl/{name}
GET
Getsyspoliciespasswordname — HashiCorp Retrieve an existing password policy.
/v1/sys/policies/password/{name}
POST
Postsyspoliciespasswordname — HashiCorp Add a new or update an existing password policy.
/v1/sys/policies/password/{name}
DELETE
Deletesyspoliciespasswordname — HashiCorp Delete a password policy.
/v1/sys/policies/password/{name}
GET
Getsyspoliciespasswordnamegenerate — HashiCorp Generate a password from an existing password policy.
/v1/sys/policies/password/{name}/generate
GET
Getsyspolicy — HashiCorp List the configured access control policies.
/v1/sys/policy
GET
Getsyspolicyname — HashiCorp Retrieve the policy body for the named policy.
/v1/sys/policy/{name}
POST
Postsyspolicyname — HashiCorp Add a new or update an existing policy.
/v1/sys/policy/{name}
DELETE
Deletesyspolicyname — HashiCorp Delete the policy with the given name.
/v1/sys/policy/{name}
GET
Getsyspprof — HashiCorp Returns an HTML page listing the available profiles.
/v1/sys/pprof
GET
Getsyspprofallocs — HashiCorp Returns a sampling of all past memory allocations.
/v1/sys/pprof/allocs
GET
Getsyspprofblock — HashiCorp Returns stack traces that led to blocking on synchronization primitives
/v1/sys/pprof/block
GET
Getsyspprofcmdline — HashiCorp Returns the running program's command line.
/v1/sys/pprof/cmdline
GET
Getsyspprofgoroutine — HashiCorp Returns stack traces of all current goroutines.
/v1/sys/pprof/goroutine
GET
Getsyspprofheap — HashiCorp Returns a sampling of memory allocations of live object.
/v1/sys/pprof/heap
GET
Getsyspprofmutex — HashiCorp Returns stack traces of holders of contended mutexes
/v1/sys/pprof/mutex
GET
Getsyspprofprofile — HashiCorp Returns a pprof-formatted cpu profile payload.
/v1/sys/pprof/profile
GET
Getsyspprofsymbol — HashiCorp Returns the program counters listed in the request.
/v1/sys/pprof/symbol
GET
Getsyspprofthreadcreate — HashiCorp Returns stack traces that led to the creation of new OS threads
/v1/sys/pprof/threadcreate
GET
Getsyspproftrace — HashiCorp Returns the execution trace in binary form.
/v1/sys/pprof/trace
GET
Getsysquotasconfig — getsysquotasconfig
/v1/sys/quotas/config
POST
Postsysquotasconfig — postsysquotasconfig
/v1/sys/quotas/config
GET
Getsysquotasratelimit — getsysquotasratelimit
/v1/sys/quotas/rate-limit
GET
Getsysquotasratelimitname — getsysquotasratelimitname
/v1/sys/quotas/rate-limit/{name}
POST
Postsysquotasratelimitname — postsysquotasratelimitname
/v1/sys/quotas/rate-limit/{name}
DELETE
Deletesysquotasratelimitname — deletesysquotasratelimitname
/v1/sys/quotas/rate-limit/{name}
GET
Getsysraw — HashiCorp Read the value of the key at the given path.
/v1/sys/raw
POST
Postsysraw — HashiCorp Update the value of the key at the given path.
/v1/sys/raw
DELETE
Deletesysraw — HashiCorp Delete the key with given path.
/v1/sys/raw
GET
Getsysrawpath — HashiCorp Read the value of the key at the given path.
/v1/sys/raw/{path}
POST
Postsysrawpath — HashiCorp Update the value of the key at the given path.
/v1/sys/raw/{path}
DELETE
Deletesysrawpath — HashiCorp Delete the key with given path.
/v1/sys/raw/{path}
GET
Getsysrekeybackup — HashiCorp Return the backup copy of PGP-encrypted unseal keys.
/v1/sys/rekey/backup
DELETE
Deletesysrekeybackup — HashiCorp Delete the backup copy of PGP-encrypted unseal keys.
/v1/sys/rekey/backup
GET
Getsysrekeyinit — HashiCorp Reads the configuration and progress of the current rekey attempt.
/v1/sys/rekey/init
POST
Postsysrekeyinit — HashiCorp Initializes a new rekey attempt.
/v1/sys/rekey/init
DELETE
Deletesysrekeyinit — HashiCorp Cancels any in-progress rekey.
/v1/sys/rekey/init
GET
Getsysrekeyrecoverykeybackup — HashiCorp Allows fetching or deleting the backup of the rotated unseal keys.
/v1/sys/rekey/recovery-key-backup
DELETE
Deletesysrekeyrecoverykeybackup — HashiCorp Allows fetching or deleting the backup of the rotated unseal keys.
/v1/sys/rekey/recovery-key-backup
POST
Postsysrekeyupdate — HashiCorp Enter a single master key share to progress the rekey of the Vault.
/v1/sys/rekey/update
GET
Getsysrekeyverify — HashiCorp Read the configuration and progress of the current rekey verification attempt.
/v1/sys/rekey/verify
POST
Postsysrekeyverify — HashiCorp Enter a single new key share to progress the rekey verification operation.
/v1/sys/rekey/verify
DELETE
Deletesysrekeyverify — HashiCorp Cancel any in-progress rekey verification operation.
/v1/sys/rekey/verify
POST
Postsysremount — HashiCorp Move the mount point of an already-mounted backend.
/v1/sys/remount
POST
Postsysrenew — HashiCorp Renews a lease, requesting to extend the lease.
/v1/sys/renew
POST
Postsysrenewurlleaseid — HashiCorp Renews a lease, requesting to extend the lease.
/v1/sys/renew/{url-lease-id}
GET
Getsysreplicationstatus — getsysreplicationstatus
/v1/sys/replication/status
POST
Postsysrevoke — HashiCorp Revokes a lease immediately.
/v1/sys/revoke
POST
Postsysrevokeforceprefix — HashiCorp Revokes all secrets or tokens generated under a given prefix immediately
/v1/sys/revoke-force/{prefix}
POST
Postsysrevokeprefixprefix — HashiCorp Revokes all secrets (via a lease ID prefix) or tokens (via the tokens' path property) generated under a given prefix immediately.
/v1/sys/revoke-prefix/{prefix}
POST
Postsysrevokeurlleaseid — HashiCorp Revokes a lease immediately.
/v1/sys/revoke/{url-lease-id}
POST
Postsysrotate — HashiCorp Rotates the backend encryption key used to persist data.
/v1/sys/rotate
GET
Getsysrotateconfig — getsysrotateconfig
/v1/sys/rotate/config
POST
Postsysrotateconfig — postsysrotateconfig
/v1/sys/rotate/config
POST
Postsysseal — HashiCorp Seal the Vault.
/v1/sys/seal
GET
Getsyssealstatus — HashiCorp Check the seal status of a Vault.
/v1/sys/seal-status
POST
Postsysstepdown — HashiCorp Cause the node to give up active status.
/v1/sys/step-down
POST
Postsystoolshash — HashiCorp Generate a hash sum for input data
/v1/sys/tools/hash
POST
Postsystoolshashurlalgorithm — HashiCorp Generate a hash sum for input data
/v1/sys/tools/hash/{urlalgorithm}
POST
Postsystoolsrandom — HashiCorp Generate random bytes
/v1/sys/tools/random
POST
Postsystoolsrandomurlbytes — HashiCorp Generate random bytes
/v1/sys/tools/random/{urlbytes}
POST
Postsysunseal — HashiCorp Unseal the Vault.
/v1/sys/unseal
GET
Getsyswrappinglookup — HashiCorp Look up wrapping properties for the requester's token.
/v1/sys/wrapping/lookup
POST
Postsyswrappinglookup — HashiCorp Look up wrapping properties for the given token.
/v1/sys/wrapping/lookup
POST
Postsyswrappingrewrap — HashiCorp Rotates a response-wrapped token.
/v1/sys/wrapping/rewrap
POST
Postsyswrappingunwrap — HashiCorp Unwraps a response-wrapped token.
/v1/sys/wrapping/unwrap
POST
Postsyswrappingwrap — HashiCorp Response-wraps an arbitrary JSON object.
/v1/sys/wrapping/wrap

MCP Tools

hashicorp-list-enabled-audit-devices

HashiCorp List the enabled audit devices.

read-only idempotent
hashicorp-hash-given-string-given

HashiCorp The hash of the given string via the given audit backend

hashicorp-enable-new-audit-device

HashiCorp Enable a new audit device at the supplied path.

hashicorp-disable-audit-device-given

HashiCorp Disable the audit device at the given path.

idempotent
hashicorp-list-currently-enabled-credential

HashiCorp List the currently enabled credential backends.

read-only idempotent
hashicorp-enables-new-auth-method

HashiCorp Enables a new auth method.

hashicorp-disable-auth-method-given

HashiCorp Disable the auth method at the given auth path

idempotent
hashicorp-reads-given-auth-path-s

HashiCorp Reads the given auth path's configuration.

read-only idempotent
hashicorp-tune-configuration-parameters-given

HashiCorp Tune configuration parameters for a given auth path.

hashicorp-fetches-capabilities-given-token

HashiCorp Fetches the capabilities of the given token on the given path.

read-only
hashicorp-fetches-capabilities-token-associated

HashiCorp Fetches the capabilities of the token associated with the given token, on the given path.

read-only
hashicorp-fetches-capabilities-given-token-2

HashiCorp Fetches the capabilities of the given token on the given path.

read-only
hashicorp-list-request-headers-that

HashiCorp List the request headers that are configured to be audited.

read-only idempotent
hashicorp-list-information-given-request

HashiCorp List the information for the given request header.

read-only idempotent
hashicorp-enable-auditing-header

HashiCorp Enable auditing of a header.

hashicorp-disable-auditing-given-request

HashiCorp Disable auditing of the given request header.

idempotent
hashicorp-return-current-cors-settings

HashiCorp Return the current CORS settings.

read-only idempotent
hashicorp-configure-cors-settings

HashiCorp Configure the CORS settings.

hashicorp-remove-any-cors-settings

HashiCorp Remove any CORS settings.

idempotent
hashicorp-reload-given-subsystem

HashiCorp Reload the given subsystem

hashicorp-return-sanitized-version-vault

HashiCorp Return a sanitized version of the Vault server configuration.

read-only idempotent
hashicorp-return-list-configured-ui

HashiCorp Return a list of configured UI headers.

read-only idempotent
hashicorp-return-given-ui-header-s

HashiCorp Return the given UI header's configuration

read-only idempotent
hashicorp-configure-values-be-returned

HashiCorp Configure the values to be returned for the UI header.

hashicorp-remove-ui-header

HashiCorp Remove a UI header.

idempotent
hashicorp-read-configuration-and-progress

HashiCorp Read the configuration and progress of the current root generation attempt.

read-only idempotent
hashicorp-initializes-new-root-generation

HashiCorp Initializes a new root generation attempt.

hashicorp-cancels-any-progress-root

HashiCorp Cancels any in-progress root generation attempt.

idempotent
hashicorp-read-configuration-and-progress-2

HashiCorp Read the configuration and progress of the current root generation attempt.

read-only idempotent
hashicorp-initializes-new-root-generation-2

HashiCorp Initializes a new root generation attempt.

hashicorp-cancels-any-progress-root-2

HashiCorp Cancels any in-progress root generation attempt.

idempotent
hashicorp-enter-single-master-key

HashiCorp Enter a single master key share to progress the root generation attempt.

hashicorp-returns-health-status-vault

HashiCorp Returns the health status of Vault.

read-only idempotent
hashicorp-information-about-host-instance

HashiCorp Information about the host instance that this Vault server is running on.

read-only idempotent
hashicorp-returns-initialization-status-vault

HashiCorp Returns the initialization status of Vault.

read-only idempotent
hashicorp-initialize-new-vault

HashiCorp Initialize a new Vault.

hashicorp-report-client-count-metrics

HashiCorp Report the client count metrics, for this namespace and all child namespaces.

read-only idempotent
hashicorp-report-number-clients-this

HashiCorp Report the number of clients for this month, for this namespace and all child namespaces.

read-only idempotent
hashicorp-read-client-count-tracking

HashiCorp Read the client count tracking configuration.

read-only idempotent
hashicorp-enable-disable-collection-client

HashiCorp Enable or disable collection of client count, set retention period, or set default reporting period.

hashicorp-backwards-compatibility-is-not

HashiCorp Backwards compatibility is not guaranteed for this API

read-only idempotent
hashicorp-backwards-compatibility-is-not-2

HashiCorp Backwards compatibility is not guaranteed for this API

read-only idempotent
hashicorp-backwards-compatibility-is-not-3

HashiCorp Backwards compatibility is not guaranteed for this API

read-only idempotent
hashicorp-generate-openapi-3-document

HashiCorp Generate an OpenAPI 3 document of all mounted paths.

read-only idempotent
hashicorp-lists-enabled-feature-flags

HashiCorp Lists enabled feature flags.

read-only idempotent
hashicorp-lists-all-enabled-and

HashiCorp Lists all enabled and visible auth and secrets mounts.

read-only idempotent
hashicorp-return-information-about-given

HashiCorp Return information about the given mount.

read-only idempotent
hashicorp-backwards-compatibility-is-not-4

HashiCorp Backwards compatibility is not guaranteed for this API

read-only idempotent
hashicorp-backwards-compatibility-is-not-5

HashiCorp Backwards compatibility is not guaranteed for this API

read-only idempotent
hashicorp-provides-information-about-backend

HashiCorp Provides information about the backend encryption key.

read-only idempotent
hashicorp-returns-high-availability-status

HashiCorp Returns the high availability status and current leader instance of Vault.

read-only idempotent
hashicorp-list-leases-associated-this

HashiCorp List leases associated with this Vault cluster

read-only idempotent
hashicorp-count-leases-associated-this

HashiCorp Count of leases associated with this Vault cluster

read-only idempotent
hashicorp-retrieve-lease-metadata

HashiCorp Retrieve lease metadata.

read-only
hashicorp-returns-list-lease-ids

HashiCorp Returns a list of lease ids.

read-only idempotent
hashicorp-returns-list-lease-ids-2

HashiCorp Returns a list of lease ids.

read-only idempotent
hashicorp-renews-lease-requesting-extend

HashiCorp Renews a lease, requesting to extend the lease.

hashicorp-renews-lease-requesting-extend-2

HashiCorp Renews a lease, requesting to extend the lease.

hashicorp-revokes-lease-immediately

HashiCorp Revokes a lease immediately.

hashicorp-revokes-all-secrets-tokens

HashiCorp Revokes all secrets or tokens generated under a given prefix immediately

hashicorp-revokes-all-secrets-lease

HashiCorp Revokes all secrets (via a lease ID prefix) or tokens (via the tokens' path property) generated under a given prefix immediately.

hashicorp-revokes-lease-immediately-2

HashiCorp Revokes a lease immediately.

hashicorp-this-endpoint-performs-cleanup

HashiCorp This endpoint performs cleanup tasks that can be run if certain error

hashicorp-export-metrics-aggregated-telemetry

HashiCorp Export the metrics aggregated for telemetry purpose.

read-only idempotent
getsysmonitor

getsysmonitor

read-only idempotent
hashicorp-list-currently-mounted-backends

HashiCorp List the currently mounted backends.

read-only idempotent
hashicorp-enable-new-secrets-engine

HashiCorp Enable a new secrets engine at the given path.

hashicorp-disable-mount-point-specified

HashiCorp Disable the mount point specified at the given path.

idempotent
hashicorp-tune-backend-configuration-parameters

HashiCorp Tune backend configuration parameters for this mount.

read-only idempotent
hashicorp-tune-backend-configuration-parameters-2

HashiCorp Tune backend configuration parameters for this mount.

hashicorp-lists-all-plugins-known

HashiCorp Lists all the plugins known to Vault

read-only idempotent
hashicorp-return-configuration-data-plugin

HashiCorp Return the configuration data for the plugin with the given name.

read-only idempotent
hashicorp-register-new-plugin-updates

HashiCorp Register a new plugin, or updates an existing one with the supplied name.

hashicorp-remove-plugin-given-name

HashiCorp Remove the plugin with the given name.

idempotent
hashicorp-list-plugins-catalog

HashiCorp List the plugins in the catalog.

read-only idempotent
hashicorp-return-configuration-data-plugin-2

HashiCorp Return the configuration data for the plugin with the given name.

read-only idempotent
hashicorp-register-new-plugin-updates-2

HashiCorp Register a new plugin, or updates an existing one with the supplied name.

hashicorp-remove-plugin-given-name-2

HashiCorp Remove the plugin with the given name.

idempotent
hashicorp-reload-mounted-plugin-backends

HashiCorp Reload mounted plugin backends.

hashicorp-list-configured-access-control

HashiCorp List the configured access control policies.

read-only idempotent
hashicorp-retrieve-information-about-named

HashiCorp Retrieve information about the named ACL policy.

read-only idempotent
hashicorp-add-new-update-existing

HashiCorp Add a new or update an existing ACL policy.

hashicorp-delete-acl-policy-given

HashiCorp Delete the ACL policy with the given name.

idempotent
hashicorp-retrieve-existing-password-policy

HashiCorp Retrieve an existing password policy.

read-only idempotent
hashicorp-add-new-update-existing-2

HashiCorp Add a new or update an existing password policy.

hashicorp-delete-password-policy

HashiCorp Delete a password policy.

idempotent
hashicorp-generate-password-existing-password

HashiCorp Generate a password from an existing password policy.

read-only idempotent
hashicorp-list-configured-access-control-2

HashiCorp List the configured access control policies.

read-only idempotent
hashicorp-retrieve-policy-body-named

HashiCorp Retrieve the policy body for the named policy.

read-only idempotent
hashicorp-add-new-update-existing-3

HashiCorp Add a new or update an existing policy.

hashicorp-delete-policy-given-name

HashiCorp Delete the policy with the given name.

idempotent
hashicorp-returns-html-page-listing

HashiCorp Returns an HTML page listing the available profiles.

read-only idempotent
hashicorp-returns-sampling-all-past

HashiCorp Returns a sampling of all past memory allocations.

read-only idempotent
hashicorp-returns-stack-traces-that

HashiCorp Returns stack traces that led to blocking on synchronization primitives

read-only idempotent
hashicorp-returns-running-program-s-command

HashiCorp Returns the running program's command line.

read-only idempotent
hashicorp-returns-stack-traces-all

HashiCorp Returns stack traces of all current goroutines.

read-only idempotent
hashicorp-returns-sampling-memory-allocations

HashiCorp Returns a sampling of memory allocations of live object.

read-only idempotent
hashicorp-returns-stack-traces-holders

HashiCorp Returns stack traces of holders of contended mutexes

read-only idempotent
hashicorp-returns-pprof-formatted-cpu

HashiCorp Returns a pprof-formatted cpu profile payload.

read-only idempotent
hashicorp-returns-program-counters-listed

HashiCorp Returns the program counters listed in the request.

read-only idempotent
hashicorp-returns-stack-traces-that-2

HashiCorp Returns stack traces that led to the creation of new OS threads

read-only idempotent
hashicorp-returns-execution-trace-binary

HashiCorp Returns the execution trace in binary form.

read-only idempotent
getsysquotasconfig

getsysquotasconfig

read-only idempotent
postsysquotasconfig

postsysquotasconfig

getsysquotasratelimit

getsysquotasratelimit

read-only idempotent
getsysquotasratelimitname

getsysquotasratelimitname

read-only idempotent
postsysquotasratelimitname

postsysquotasratelimitname

deletesysquotasratelimitname

deletesysquotasratelimitname

idempotent
hashicorp-read-value-key-given

HashiCorp Read the value of the key at the given path.

read-only idempotent
hashicorp-update-value-key-given

HashiCorp Update the value of the key at the given path.

hashicorp-delete-key-given-path

HashiCorp Delete the key with given path.

idempotent
hashicorp-read-value-key-given-2

HashiCorp Read the value of the key at the given path.

read-only idempotent
hashicorp-update-value-key-given-2

HashiCorp Update the value of the key at the given path.

hashicorp-delete-key-given-path-2

HashiCorp Delete the key with given path.

idempotent
hashicorp-return-backup-copy-pgp

HashiCorp Return the backup copy of PGP-encrypted unseal keys.

read-only idempotent
hashicorp-delete-backup-copy-pgp

HashiCorp Delete the backup copy of PGP-encrypted unseal keys.

idempotent
hashicorp-reads-configuration-and-progress

HashiCorp Reads the configuration and progress of the current rekey attempt.

read-only idempotent
hashicorp-initializes-new-rekey-attempt

HashiCorp Initializes a new rekey attempt.

hashicorp-cancels-any-progress-rekey

HashiCorp Cancels any in-progress rekey.

idempotent
hashicorp-allows-fetching-deleting-backup

HashiCorp Allows fetching or deleting the backup of the rotated unseal keys.

read-only idempotent
hashicorp-allows-fetching-deleting-backup-2

HashiCorp Allows fetching or deleting the backup of the rotated unseal keys.

idempotent
hashicorp-enter-single-master-key-2

HashiCorp Enter a single master key share to progress the rekey of the Vault.

hashicorp-read-configuration-and-progress-3

HashiCorp Read the configuration and progress of the current rekey verification attempt.

read-only idempotent
hashicorp-enter-single-new-key

HashiCorp Enter a single new key share to progress the rekey verification operation.

hashicorp-cancel-any-progress-rekey

HashiCorp Cancel any in-progress rekey verification operation.

idempotent
hashicorp-move-mount-point-already

HashiCorp Move the mount point of an already-mounted backend.

hashicorp-renews-lease-requesting-extend-3

HashiCorp Renews a lease, requesting to extend the lease.

hashicorp-renews-lease-requesting-extend-4

HashiCorp Renews a lease, requesting to extend the lease.

getsysreplicationstatus

getsysreplicationstatus

read-only idempotent
hashicorp-revokes-lease-immediately-3

HashiCorp Revokes a lease immediately.

hashicorp-revokes-all-secrets-tokens-2

HashiCorp Revokes all secrets or tokens generated under a given prefix immediately

hashicorp-revokes-all-secrets-lease-2

HashiCorp Revokes all secrets (via a lease ID prefix) or tokens (via the tokens' path property) generated under a given prefix immediately.

hashicorp-revokes-lease-immediately-4

HashiCorp Revokes a lease immediately.

hashicorp-rotates-backend-encryption-key

HashiCorp Rotates the backend encryption key used to persist data.

getsysrotateconfig

getsysrotateconfig

read-only idempotent
postsysrotateconfig

postsysrotateconfig

hashicorp-seal-vault

HashiCorp Seal the Vault.

hashicorp-check-seal-status-vault

HashiCorp Check the seal status of a Vault.

read-only idempotent
hashicorp-cause-node-give-up

HashiCorp Cause the node to give up active status.

hashicorp-generate-hash-sum-input

HashiCorp Generate a hash sum for input data

hashicorp-generate-hash-sum-input-2

HashiCorp Generate a hash sum for input data

hashicorp-generate-random-bytes

HashiCorp Generate random bytes

hashicorp-generate-random-bytes-2

HashiCorp Generate random bytes

hashicorp-unseal-vault

HashiCorp Unseal the Vault.

hashicorp-look-up-wrapping-properties

HashiCorp Look up wrapping properties for the requester's token.

read-only idempotent
hashicorp-look-up-wrapping-properties-2

HashiCorp Look up wrapping properties for the given token.

hashicorp-rotates-response-wrapped-token

HashiCorp Rotates a response-wrapped token.

hashicorp-unwraps-response-wrapped-token

HashiCorp Unwraps a response-wrapped token.

hashicorp-response-wraps-arbitrary-json

HashiCorp Response-wraps an arbitrary JSON object.

Capability Spec

vault-system.yaml Raw ↑ 
naftiko: 1.0.0-alpha2
info:
  label: HashiCorp Vault API — System
  description: 'HashiCorp Vault API — System. 149 operations. Lead operation: HashiCorp List the enabled audit devices.. Self-contained
    Naftiko capability covering one Hashicorp business surface.'
  tags:
  - Hashicorp
  - System
  created: '2026-05-19'
  modified: '2026-05-19'
binds:
- namespace: env
  keys:
    HASHICORP_API_KEY: HASHICORP_API_KEY
capability:
  consumes:
  - type: http
    namespace: vault-system
    baseUri: ''
    description: HashiCorp Vault API — System business capability. Self-contained, no shared references.
    resources:
    - name: sys-audit
      path: /sys/audit
      operations:
      - name: getsysaudit
        method: GET
        description: HashiCorp List the enabled audit devices.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: sys-audit-hash-path
      path: /sys/audit-hash/{path}
      operations:
      - name: postsysaudithashpath
        method: POST
        description: HashiCorp The hash of the given string via the given audit backend
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: false
    - name: sys-audit-path
      path: /sys/audit/{path}
      operations:
      - name: postsysauditpath
        method: POST
        description: HashiCorp Enable a new audit device at the supplied path.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: false
      - name: deletesysauditpath
        method: DELETE
        description: HashiCorp Disable the audit device at the given path.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: sys-auth
      path: /sys/auth
      operations:
      - name: getsysauth
        method: GET
        description: HashiCorp List the currently enabled credential backends.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: sys-auth-path
      path: /sys/auth/{path}
      operations:
      - name: postsysauthpath
        method: POST
        description: HashiCorp Enables a new auth method.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: false
      - name: deletesysauthpath
        method: DELETE
        description: HashiCorp Disable the auth method at the given auth path
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: sys-auth-path-tune
      path: /sys/auth/{path}/tune
      operations:
      - name: getsysauthpathtune
        method: GET
        description: HashiCorp Reads the given auth path's configuration.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
      - name: postsysauthpathtune
        method: POST
        description: HashiCorp Tune configuration parameters for a given auth path.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: false
    - name: sys-capabilities
      path: /sys/capabilities
      operations:
      - name: postsyscapabilities
        method: POST
        description: HashiCorp Fetches the capabilities of the given token on the given path.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: false
    - name: sys-capabilities-accessor
      path: /sys/capabilities-accessor
      operations:
      - name: postsyscapabilitiesaccessor
        method: POST
        description: HashiCorp Fetches the capabilities of the token associated with the given token, on the given path.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: false
    - name: sys-capabilities-self
      path: /sys/capabilities-self
      operations:
      - name: postsyscapabilitiesself
        method: POST
        description: HashiCorp Fetches the capabilities of the given token on the given path.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: false
    - name: sys-config-auditing-request-headers
      path: /sys/config/auditing/request-headers
      operations:
      - name: getsysconfigauditingrequestheaders
        method: GET
        description: HashiCorp List the request headers that are configured to be audited.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: sys-config-auditing-request-headers-header
      path: /sys/config/auditing/request-headers/{header}
      operations:
      - name: getsysconfigauditingrequestheadersheader
        method: GET
        description: HashiCorp List the information for the given request header.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
      - name: postsysconfigauditingrequestheadersheader
        method: POST
        description: HashiCorp Enable auditing of a header.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: false
      - name: deletesysconfigauditingrequestheadersheader
        method: DELETE
        description: HashiCorp Disable auditing of the given request header.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: sys-config-cors
      path: /sys/config/cors
      operations:
      - name: getsysconfigcors
        method: GET
        description: HashiCorp Return the current CORS settings.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
      - name: postsysconfigcors
        method: POST
        description: HashiCorp Configure the CORS settings.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: false
      - name: deletesysconfigcors
        method: DELETE
        description: HashiCorp Remove any CORS settings.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: sys-config-reload-subsystem
      path: /sys/config/reload/{subsystem}
      operations:
      - name: postsysconfigreloadsubsystem
        method: POST
        description: HashiCorp Reload the given subsystem
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: sys-config-state-sanitized
      path: /sys/config/state/sanitized
      operations:
      - name: getsysconfigstatesanitized
        method: GET
        description: HashiCorp Return a sanitized version of the Vault server configuration.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: sys-config-ui-headers
      path: /sys/config/ui/headers/
      operations:
      - name: getsysconfiguiheaders
        method: GET
        description: HashiCorp Return a list of configured UI headers.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: list
          in: query
          type: string
          description: Return a list if `true`
    - name: sys-config-ui-headers-header
      path: /sys/config/ui/headers/{header}
      operations:
      - name: getsysconfiguiheadersheader
        method: GET
        description: HashiCorp Return the given UI header's configuration
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
      - name: postsysconfiguiheadersheader
        method: POST
        description: HashiCorp Configure the values to be returned for the UI header.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: false
      - name: deletesysconfiguiheadersheader
        method: DELETE
        description: HashiCorp Remove a UI header.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: sys-generate-root
      path: /sys/generate-root
      operations:
      - name: getsysgenerateroot
        method: GET
        description: HashiCorp Read the configuration and progress of the current root generation attempt.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
      - name: postsysgenerateroot
        method: POST
        description: HashiCorp Initializes a new root generation attempt.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: false
      - name: deletesysgenerateroot
        method: DELETE
        description: HashiCorp Cancels any in-progress root generation attempt.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: sys-generate-root-attempt
      path: /sys/generate-root/attempt
      operations:
      - name: getsysgeneraterootattempt
        method: GET
        description: HashiCorp Read the configuration and progress of the current root generation attempt.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
      - name: postsysgeneraterootattempt
        method: POST
        description: HashiCorp Initializes a new root generation attempt.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: false
      - name: deletesysgeneraterootattempt
        method: DELETE
        description: HashiCorp Cancels any in-progress root generation attempt.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: sys-generate-root-update
      path: /sys/generate-root/update
      operations:
      - name: postsysgeneraterootupdate
        method: POST
        description: HashiCorp Enter a single master key share to progress the root generation attempt.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: false
    - name: sys-health
      path: /sys/health
      operations:
      - name: getsyshealth
        method: GET
        description: HashiCorp Returns the health status of Vault.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: sys-host-info
      path: /sys/host-info
      operations:
      - name: getsyshostinfo
        method: GET
        description: HashiCorp Information about the host instance that this Vault server is running on.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: sys-init
      path: /sys/init
      operations:
      - name: getsysinit
        method: GET
        description: HashiCorp Returns the initialization status of Vault.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
      - name: postsysinit
        method: POST
        description: HashiCorp Initialize a new Vault.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: false
    - name: sys-internal-counters-activity
      path: /sys/internal/counters/activity
      operations:
      - name: getsysinternalcountersactivity
        method: GET
        description: HashiCorp Report the client count metrics, for this namespace and all child namespaces.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: sys-internal-counters-activity-monthly
      path: /sys/internal/counters/activity/monthly
      operations:
      - name: getsysinternalcountersactivitymonthly
        method: GET
        description: HashiCorp Report the number of clients for this month, for this namespace and all child namespaces.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: sys-internal-counters-config
      path: /sys/internal/counters/config
      operations:
      - name: getsysinternalcountersconfig
        method: GET
        description: HashiCorp Read the client count tracking configuration.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
      - name: postsysinternalcountersconfig
        method: POST
        description: HashiCorp Enable or disable collection of client count, set retention period, or set default reporting
          period.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: false
    - name: sys-internal-counters-entities
      path: /sys/internal/counters/entities
      operations:
      - name: getsysinternalcountersentities
        method: GET
        description: HashiCorp Backwards compatibility is not guaranteed for this API
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: sys-internal-counters-requests
      path: /sys/internal/counters/requests
      operations:
      - name: getsysinternalcountersrequests
        method: GET
        description: HashiCorp Backwards compatibility is not guaranteed for this API
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: sys-internal-counters-tokens
      path: /sys/internal/counters/tokens
      operations:
      - name: getsysinternalcounterstokens
        method: GET
        description: HashiCorp Backwards compatibility is not guaranteed for this API
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: sys-internal-specs-openapi
      path: /sys/internal/specs/openapi
      operations:
      - name: getsysinternalspecsopenapi
        method: GET
        description: HashiCorp Generate an OpenAPI 3 document of all mounted paths.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: sys-internal-ui-feature-flags
      path: /sys/internal/ui/feature-flags
      operations:
      - name: getsysinternaluifeatureflags
        method: GET
        description: HashiCorp Lists enabled feature flags.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: sys-internal-ui-mounts
      path: /sys/internal/ui/mounts
      operations:
      - name: getsysinternaluimounts
        method: GET
        description: HashiCorp Lists all enabled and visible auth and secrets mounts.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: sys-internal-ui-mounts-path
      path: /sys/internal/ui/mounts/{path}
      operations:
      - name: getsysinternaluimountspath
        method: GET
        description: HashiCorp Return information about the given mount.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: sys-internal-ui-namespaces
      path: /sys/internal/ui/namespaces
      operations:
      - name: getsysinternaluinamespaces
        method: GET
        description: HashiCorp Backwards compatibility is not guaranteed for this API
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: sys-internal-ui-resultant-acl
      path: /sys/internal/ui/resultant-acl
      operations:
      - name: getsysinternaluiresultantacl
        method: GET
        description: HashiCorp Backwards compatibility is not guaranteed for this API
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: sys-key-status
      path: /sys/key-status
      operations:
      - name: getsyskeystatus
        method: GET
        description: HashiCorp Provides information about the backend encryption key.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: sys-leader
      path: /sys/leader
      operations:
      - name: getsysleader
        method: GET
        description: HashiCorp Returns the high availability status and current leader instance of Vault.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: sys-leases
      path: /sys/leases
      operations:
      - name: getsysleases
        method: GET
        description: HashiCorp List leases associated with this Vault cluster
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: sys-leases-count
      path: /sys/leases/count
      operations:
      - name: getsysleasescount
        method: GET
        description: HashiCorp Count of leases associated with this Vault cluster
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: sys-leases-lookup
      path: /sys/leases/lookup
      operations:
      - name: postsysleaseslookup
        method: POST
        description: HashiCorp Retrieve lease metadata.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: false
    - name: sys-leases-lookup
      path: /sys/leases/lookup/
      operations:
      - name: getsysleaseslookup
        method: GET
        description: HashiCorp Returns a list of lease ids.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: list
          in: query
          type: string
          description: Return a list if `true`
    - name: sys-leases-lookup-prefix
      path: /sys/leases/lookup/{prefix}
      operations:
      - name: getsysleaseslookupprefix
        method: GET
        description: HashiCorp Returns a list of lease ids.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: list
          in: query
          type: string
          description: Return a list if `true`
    - name: sys-leases-renew
      path: /sys/leases/renew
      operations:
      - name: postsysleasesrenew
        method: POST
        description: HashiCorp Renews a lease, requesting to extend the lease.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: false
    - name: sys-leases-renew-url_lease_id
      path: /sys/leases/renew/{url_lease_id}
      operations:
      - name: postsysleasesrenewurlleaseid
        method: POST
        description: HashiCorp Renews a lease, requesting to extend the lease.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: false
    - name: sys-leases-revoke
      path: /sys/leases/revoke
      operations:
      - name: postsysleasesrevoke
        method: POST
        description: HashiCorp Revokes a lease immediately.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: false
    - name: sys-leases-revoke-force-prefix
      path: /sys/leases/revoke-force/{prefix}
      operations:
      - name: postsysleasesrevokeforceprefix
        method: POST
        description: HashiCorp Revokes all secrets or tokens generated under a given prefix immediately
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: sys-leases-revoke-prefix-prefix
      path: /sys/leases/revoke-prefix/{prefix}
      operations:
      - name: postsysleasesrevokeprefixprefix
        method: POST
        description: HashiCorp Revokes all secrets (via a lease ID prefix) or tokens (via the tokens' path property) generated
          under a given prefix immediately.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: false
    - name: sys-leases-revoke-url_lease_id
      path: /sys/leases/revoke/{url_lease_id}
      operations:
      - name: postsysleasesrevokeurlleaseid
        method: POST
        description: HashiCorp Revokes a lease immediately.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: false
    - name: sys-leases-tidy
      path: /sys/leases/tidy
      operations:
      - name: postsysleasestidy
        method: POST
        description: HashiCorp This endpoint performs cleanup tasks that can be run if certain error
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: sys-metrics
      path: /sys/metrics
      operations:
      - name: getsysmetrics
        method: GET
        description: HashiCorp Export the metrics aggregated for telemetry purpose.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: sys-monitor
      path: /sys/monitor
      operations:
      - name: getsysmonitor
        method: GET
        description: ''
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: sys-mounts
      path: /sys/mounts
      operations:
      - name: getsysmounts
        method: GET
        description: HashiCorp List the currently mounted backends.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: sys-mounts-path
      path: /sys/mounts/{path}
      operations:
      - name: postsysmountspath
        method: POST
        description: HashiCorp Enable a new secrets engine at the given path.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: false
      - name: deletesysmountspath
        method: DELETE
        description: HashiCorp Disable the mount point specified at the given path.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: sys-mounts-path-tune
      path: /sys/mounts/{path}/tune
      operations:
      - name: getsysmountspathtune
        method: GET
        description: HashiCorp Tune backend configuration parameters for this mount.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
      - name: postsysmountspathtune
        method: POST
        description: HashiCorp Tune backend configuration parameters for this mount.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: false
    - name: sys-plugins-catalog
      path: /sys/plugins/catalog
      operations:
      - name: getsyspluginscatalog
        method: GET
        description: HashiCorp Lists all the plugins known to Vault
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: sys-plugins-catalog-name
      path: /sys/plugins/catalog/{name}
      operations:
      - name: getsyspluginscatalogname
        method: GET
        description: HashiCorp Return the configuration data for the plugin with the given name.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
      - name: postsyspluginscatalogname
        method: POST
        description: HashiCorp Register a new plugin, or updates an existing one with the supplied name.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: false
      - name: deletesyspluginscatalogname
        method: DELETE
        description: HashiCorp Remove the plugin with the given name.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: sys-plugins-catalog-type
      path: /sys/plugins/catalog/{type}
      operations:
      - name: getsyspluginscatalogtype
        method: GET
        description: HashiCorp List the plugins in the catalog.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: list
          in: query
          type: string
          description: Return a list if `true`
    - name: sys-plugins-catalog-type-name
      path: /sys/plugins/catalog/{type}/{name}
      operations:
      - name: getsyspluginscatalogtypename
        method: GET
        description: HashiCorp Return the configuration data for the plugin with the given name.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
      - name: postsyspluginscatalogtypename
        method: POST
        description: HashiCorp Register a new plugin, or updates an existing one with the supplied name.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: false
      - name: deletesyspluginscatalogtypename
        method: DELETE
        description: HashiCorp Remove the plugin with the given name.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: sys-plugins-reload-backend
      path: /sys/plugins/reload/backend
      operations:
      - name: postsyspluginsreloadbackend
        method: POST
        description: HashiCorp Reload mounted plugin backends.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: false
    - name: sys-policies-acl
      path: /sys/policies/acl
      operations:
      - name: getsyspoliciesacl
        method: GET
        description: HashiCorp List the configured access control policies.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: list
          in: query
          type: string
          description: Return a list if `true`
    - name: sys-policies-acl-name
      path: /sys/policies/acl/{name}
      operations:
      - name: getsyspoliciesaclname
        method: GET
        description: HashiCorp Retrieve information about the named ACL policy.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
      - name: postsyspoliciesaclname
        method: POST
        description: HashiCorp Add a new or update an existing ACL policy.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: false
      - name: deletesyspoliciesaclname
        method: DELETE
        description: HashiCorp Delete the ACL policy with the given name.
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
    - name: sys-policies-password-name
      path: /sys/policies/password/{name}
      operations:
      - name: getsyspoliciespasswordname
        method: GE

# --- truncated at 32 KB (160 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/hashicorp/refs/heads/main/capabilities/vault-system.yaml