Skip to main content
POST
/
vault
/
v1
/
{vaultSlug}
/
unwrap
Unwrap an envelope data key
curl --request POST \
  --url https://api.voyant.travel/vault/v1/{vaultSlug}/unwrap \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '
{
  "wrappedDek": "<string>"
}
'
{
  "data": {
    "dek": "<string>"
  }
}

Authorizations

​
Authorization
string
header
required

Voyant Cloud API token, passed as Authorization: Bearer <token>. Each token carries a fixed set of scopes; an operation rejects tokens missing its required scope.

Path Parameters

​
vaultSlug
string
required
Pattern: ^[a-z0-9-]+$

Body

application/json
​
wrappedDek
string
required

Base64 KMS-wrapped DEK previously returned by /generateDataKey.

Response

Unwrapped data key

​
data
object
required