Skip to main content
POST
Create an item

Authorizations

Authorization
string
header
required

Bearer token in the Authorization header. Management routes accept a session token or a personal API key (abu_). Agent-facing access.* routes require an agent session token (abs_).

Headers

X-Abadge-Org-Id
string

Active organization. Required when the caller belongs to more than one org; otherwise resolved automatically.

Body

application/json
storageMode
string
required
Allowed value: "zero_knowledge"
id
string<uuid>
required

Client-generated UUID. Bound into the encryption AAD, so the server stores it verbatim.

label
string
required
Minimum string length: 1
encryptedItemKey
string
required

DEK wrapped under the profile root key (XChaCha20-Poly1305).

ciphertext
string
required

Payload encrypted with the DEK.

profileId
string<uuid>

Target zero-knowledge profile. Resolves the org's first ZK profile when omitted.

expectedKeyVersion
integer

Optional CAS guard against a concurrent key rotation.

Required range: x >= 0

Response

Created

id
string
required