Vault is Eurobase's built-in encrypted secrets storage. Store API keys, credentials, and sensitive configuration securely — encrypted with AES-256-GCM, accessible via the console, API, and SDK. All secrets stay in EU infrastructure.

Storing secrets

Go to the Vault tab in your project. Click "New Secret", enter a name (e.g. stripe_api_key), the secret value, and an optional description. The value is encrypted before storage.

Accessing secrets from the SDK

Secrets are only accessible with the secret API key (eb_sk_). The public key cannot read secrets — this prevents client-side exposure.

// Server-side only (Node.js, backend)
const eb = createClient({ url: '...', apiKey: 'eb_sk_...' })

// Read a secret
const { data: apiKey } = await eb.vault.get('stripe_api_key')
console.log(apiKey) // 'sk_live_...'

// Store a secret
await eb.vault.set('twilio_token', 'ACxxxxxxx', 'Twilio auth token')

// List all secret names (values not included)
const { data: secrets } = await eb.vault.list()
// [{name: 'stripe_api_key', description: '...'}]

// Delete a secret
await eb.vault.delete('old_key')

Common use cases

• Payment provider keys — Mollie, Stripe API keys for processing payments
• Email/SMS credentials — SendGrid, Twilio tokens for notifications
• External API keys — OpenAI, Google Maps, any third-party service
• Database connection strings — credentials for external databases
• Webhook signing secrets — verify incoming webhooks from external services

REST API

All vault endpoints require the secret API key (eb_sk_). Public key access returns 403.