Skip to main content
POST
cURL

Authorizations

X-API-KEY
string
header
required

API key authentication. Get your API key from the Formal console.

Body

application/json
provider
enum<string>
Available options:
aws-kms,
gcp-kms
Minimum string length: 1
keyId
string
Minimum string length: 1
algorithm
enum<string>

TODO: drop the symmetric values and remove this field with the legacy KMS path; the backend already rejects anything but "rsaes_oaep_sha256".

Available options:
aes_random,
aes_deterministic,
rsaes_oaep_sha256
Minimum string length: 1
decryptorUri
string | null
publicKeyPem
string | null

PEM-encoded RSA public key, required for asymmetric algorithms.

Response

Success

encryptionKey
encryption_key · object