Vault scoping

Call GET /v1/vaults first. It returns only the vaults the credential owner can access. Use the exact returned ID or name in later requests.

1
{
2
  "vault": "qh73edk6m4999tm8v7etwcm0x98dng7t",
3
  "query": "carrier credentials"
4
}

Scope rules

• A credential may have access to several vaults.
• Most read and write tools accept a vault field.
• A vault ID is preferred for production integrations because names can change.
• If a credential can reach several vaults, do not rely on a default.
• Never reuse a vault chosen for one customer when processing another customer’s request.

Cross-vault analysis

Run a separate scoped request for each vault, keep each result labeled, and combine the results only in your own application after confirming that the user requested the comparison.