Credential vault API

Latest Dynatrace
Reference
Published Oct 13, 2026
Early Access

Store and manage credentials in Dynatrace with the Credential Vault API: create, list, update, and delete username, certificate, and token entries.

Building a Dynatrace app?

Use the @dynatrace-sdk/client-credential-vault SDK client instead of calling this API directly — it handles authentication, typing, and the environment URL for you. This REST reference is for external and automation use.

Manage credential entries of username/password, certificate, and token types, with support for external vault integrations.

To authorize, use a valid OAuth token.

Notes about compatibility:

Operations marked as early adopter or preview may be changed in non-compatible ways, although we try to avoid this.
We may add new enum constants without incrementing the API version; thus, clients need to handle unknown enum constants gracefully.

Authentication

Platform API endpoints use Platform token and OAuth client authentication. Attach a platform token or OAuth access token to the Authorization HTTP header using the Bearer scheme.

--header 'Authorization: Bearer <platform-token-or-oauth-access-token>'

For details, see Tokens and authentication and Platform tokens.

Endpoints

List credential entries (GET /entries)
Create a credential entry (POST /entries)
Get a credential entry (GET /entries/{entry-id})
Update a credential entry (PUT /entries/{entry-id})
Delete a credential entry (DELETE /entries/{entry-id})