# Connect an external vault

`POST /v1/vault-connections`

**In this build:** Uses a stand-in for an external service. The connection record is real. No external vault is contacted yet.

**Scope:** `credential.write`

**CLI:** `harebox vault connect`

## Request: `VaultConnection`

| Field | Type | Notes |
|---|---|---|
| `id` | `string` |  |
| `kind` (required) | `string` | One of: `hashicorp_vault`, `aws_secrets_manager`, `gcp_secret_manager`, `azure_key_vault`, `onepassword`, `doppler` |
| `config` | `object` |  |

## Response: 201

`VaultConnection`

| Field | Type | Notes |
|---|---|---|
| `id` | `string` |  |
| `kind` (required) | `string` | One of: `hashicorp_vault`, `aws_secrets_manager`, `gcp_secret_manager`, `azure_key_vault`, `onepassword`, `doppler` |
| `config` | `object` |  |

Errors follow [one format](../errors.html).