Skip to main content

Public API

note

Tier: Starter, Professional, Enterprise

The Passwd Public API lets you manage password records programmatically: from CI/CD pipelines, internal tooling, or any script that needs to read or write secrets stored in Passwd.

The API supports creating, listing, reading, updating, and deleting records. Every request is authenticated with a personal API key that you generate in the Passwd app.

Quickstart​

  1. In the Passwd web app, open your profile menu in the left sidebar and select API keys, then generate a new key. The key is shown only once, so copy it right away. See Managing API keys for details.

  2. Find your Passwd URL, the address where your Passwd instance runs. If you are not sure what it is, see What is my app URL.

  3. Call the API. The example below creates a password record:

curl -X POST "https://<your-passwd-url>/api/v2/public/secrets" \
  -H "Authorization: Bearer pswd_ak_..." \
  -H "Content-Type: application/json" \
  -d '{
    "type": "password",
    "name": "Amazon",
    "username": "team@example.com",
    "password": "correct-horse-battery-staple",
    "web": "https://amazon.com"
  }'
  1. List your records:
curl "https://<your-passwd-url>/api/v2/public/secrets" \
  -H "Authorization: Bearer pswd_ak_..."

That's it. The full list of endpoints, record types, and error codes is in the API reference.

How access works​

An API key acts on behalf of the user who created it. Requests made with the key can access exactly the records the user can access in the app, nothing more. Keys are tied to the user account and stop working when the user is removed from your Google Workspace.

Learn more​

  • Managing API keys: how to generate, inspect, and revoke keys, and where to store them.
  • API reference: endpoints, request and response schemas for every record type, and error responses.