Vault/API Reference

Endpoints

Authentication

All requests require an x-api-key header. Generate keys from the API Keys page.

API Reference

Vault lets you mask and unmask sensitive data in any string or JSON object. Tokens are stored encrypted and tied to your account.

Base URLhttps://ycsummer.vercel.app/
POST/api/mask

Mask sensitive values in a plain text string. Detected values are replaced with vault tokens.

Headers

x-api-keystringrequired

Your Vault API key

Content-Typestringrequired

application/json

Body

textstringrequired

The plain text string to mask

Response

200 OK
{
  "masked": "My card is __CARD_a1b2c3__ and email is __EMAIL_d4e5f6__"
}
cURL
commandmethodurlflagvalue
curl -X POST https://yourdomain.com/api/mask \
  -H "x-api-key: YOUR_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"text": "My card is 4111111111111111 and email is john@gmail.com"}'
POST/api/unmask

Restore original values from a string containing vault tokens.

Headers

x-api-keystringrequired

Your Vault API key

Content-Typestringrequired

application/json

Body

textstringrequired

The string containing vault tokens to unmask

Response

200 OK
{
  "unmasked": "My card is 4111111111111111 and email is john@gmail.com"
}
cURL
commandmethodurlflagvalue
curl -X POST https://yourdomain.com/api/unmask \
  -H "x-api-key: YOUR_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"text": "My card is __CARD_a1b2c3__ and email is __EMAIL_d4e5f6__"}'
POST/api/mask-deep

Recursively mask sensitive values inside any JSON object or array. Every string field is scanned and masked automatically.

Headers

x-api-keystringrequired

Your Vault API key

Content-Typestringrequired

application/json

Body

anyobject | arrayrequired

Any valid JSON — objects, arrays, nested structures

Response

200 OK
{
  "masked": {
    "name": "John",
    "email": "__EMAIL_d4e5f6__",
    "payment": {
      "card": "__CARD_a1b2c3__",
      "cvv": "__CVV_x7y8z9__"
    }
  }
}
cURL
commandmethodurlflagvalue
curl -X POST https://yourdomain.com/api/mask-deep \
  -H "x-api-key: YOUR_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"name":"John","email":"john@gmail.com",
  "payment":{"card":"4111111111111111","cvv":"123"}}'