Delete a secret

Soft-delete a secret at a path. All versions of that path are marked deleted; they are not returned in list or get, and GET returns 410 Gone.

Endpoint: DELETE /v1/vaults/:vault_id/secrets/:path
Authentication: Bearer JWT (write permission or vault owner)

Example request

curl

curl -X DELETE "https://api.1claw.xyz/v1/vaults/ae370174-9aee-4b02-ba7c-d1519930c709/secrets/api-keys/old-key" \
  -H "Authorization: Bearer <token>"

TypeScript

await client.secrets.delete(vaultId, "api-keys/old-key");

Response

204 No Content — Success. No body.

Error responses

Code	Meaning
401	Invalid or missing token
403	No delete/write permission
404	Vault not found

After deletion, GET .../secrets/:path for that path returns 410 Gone.