For AI agents: visit https://docs.akeyless.io/llms.txt for an index of all pages formatted in Markdown and endpoints in OpenAPI. Append .md to any documentation page URL to get its markdown version.
Jump to Content
Home
Documentation
API Reference
Release Notes
Contact Support
Get Started
Documentation
Search
Home
Documentation
API Reference
Release Notes
Contact Support
Get Started
CLI Reference - Automatic Migration
Getting Started
What Is Akeyless?
Zero-Knowledge Encryption SaaS Architecture
Distributed Fragments Cryptography (DFC)
DFC Deep Dive
Platform Components
Authentication & Authorization
Quickstarts
Creating an Akeyless Account Quickstart
Creating a Static Secret Quickstart
Creating an API Key Quickstart
Akeyless Gateway with Kubernetes Quickstart
Setup Kubernetes Quickstart
Getting a Secret within a Kubernetes Cluster Quickstart
Pricing
Release Notes
Support Tiers & Plan Limits
Service Level Agreements (SLAs)
Accessing Akeyless
Authentication Methods
AliCloud
API Key
AWS IAM
Azure AD
Certificates
Email
GCP
Kerberos
Kubernetes
Dedicated Kubernetes Service Accounts
Kubernetes Auth Client Certificate
LDAP
OAuth 2.0/JWT
OCI IAM
OIDC
Auth0 - OIDC
Azure AD - OIDC
GitHub - OIDC
GitLab - OIDC
Google - OIDC
Okta - OIDC
OIDC via Gateway
SAML
Okta SAML Authentication
Ping Identity SAML Authentication
Azure AD SAML Authentication
SAML via Gateway
Universal Identity
Setting Up Universal Identity for Windows Machines
Groups
RBAC
Sub-Claims
Sub-Admins
Personal & Corporate Areas
Akeyless Gateway
Gateway Overview
Choose a Deployment Model
Standalone Docker Deployment
Gateway Docker Advanced Configuration
Docker Compose Deployment
Kubernetes with Helm Deployment
Helm Values Reference
Cloud-Managed Kubernetes Platforms
Amazon EKS Deployment
Azure Container App Deployment
Azure Kubernetes Service Deployment
Google Kubernetes Engine Deployment
Cloud-Managed Serverless Platforms
AWS Serverless Deployment
Azure Serverless Deployment
Configure Gateway
Authentication and Access
Gateway Access Permissions Reference
TLS Settings
PQC Support Reference
Certificate Store
Zero Knowledge
Gateway Caching
Runtime Caching
Proactive Caching
Cluster Cache (Standalone)
Cluster Cache HA
Log Forwarding
HSM Integration
Automatic Migration
Operate Gateway
Telemetry and Metrics
Troubleshooting the Gateway
Gateway Network Connectivity
US SaaS Core Services
EU SaaS Core Services
Gateway Best Practices
Gateway Legacy
Kubernetes Legacy Deployment
Legacy Telemetry and Metrics
Secrets Management
Secret Types
Static Secrets
Create a Static Secret
Add a Static Secret to an Access Role
Retrieve a Secret Value
Update and Version Static Secrets
Dynamic Secrets
Artifactory Dynamic Secrets
Aerospike Dynamic Secrets
AWS Dynamic Secrets
Azure AD Dynamic Secrets
Chef Infra Dynamic Secrets
Database Dynamic Secrets
Docker Hub Dynamic Secrets
Amazon EKS Dynamic Secrets
GCP Dynamic Secrets
GitHub Dynamic Secrets
GitLab Dynamic Secrets
GKE Dynamic Secrets
Google Workspace Dynamic Secrets
Kubernetes Generic Dynamic Secrets
LDAP Dynamic Secrets
OpenAI Dynamic Secrets
Ping Dynamic Secrets
RabbitMQ Dynamic Secrets
RDP Dynamic Secrets
Snowflake Dynamic Secrets
Custom Dynamic Secrets
Rotated Secrets
Aerospike Rotated Secret
AWS Rotated Secret
Azure Rotated Secret
Database Rotated Secret
Docker Hub Rotated Secret
F5 Rotated Secret
GCP Rotated Secret
HashiCorp Vault Rotated Secret
LDAP Rotated Secret
Linked Target Rotated Secret
Okta Rotated Secret
OpenAI Rotated Secret
Splunk Rotated Secret
SSH Rotated Secret
Windows Rotated Secret
Custom Rotated Secret
Graceful Rotation
Password Policy for Dynamic and Rotated Secrets
Secrets Versions
Sharing Secrets
Create a Password
Targets
Artifactory Target
Aerospike Target
AWS Target
Azure AD Targets
Bedrock Target
Chef Infra Target
Claude Target
Cloudflare Target
Custom DNS Target
Database Targets
DigiCert Target
Docker Hub Target
F5 Target
GCP Targets
Gemini Target
GitHub Target
GitLab Target
GlobalSign Atlas Target
GlobalSign Target
GoDaddy Target
Google CA Target
Grok Target
HashiCorp Vault Target
Keycloak Target
Kubernetes Targets
LDAP Target
Let's Encrypt Target
Linked Target
Okta Target
OpenAI Target
Ping Target
RabbitMQ Target
Salesforce Target
Sectigo Target
Splunk Target
SSH Target
Venafi Target
Web Target
Windows Target
ZeroSSL Target
Secret and Target Locking
Certificate Lifecycle Management
Overview
Issuers
ACME Server
SCEP Server
Certificate Storage
Certificate Provisioning
Certificate Discovery
Certificate Renewal
Certificate Revocation List
kubectl Access
PKI Certificate Issuer
Build Your Chain of Trust
Public CA
Code Signing with Akeyless
Signing Images
Java JAR & APK Signing with Akeyless
Windows Code Signing with Akeyless
Encryption & KMS
Overview
Zero-Knowledge Encryption
Classic Keys
Encryption Keys
Batch Encryption
External KMS Integration
AWS KMS
Azure KMS
GCP KMS
Salesforce Shield
Multi-Target Classic Key Provisioning
Key Lifecycle Management
FIPS Certifications
GPG Keys
Key Rotation
KMIP Server
KMIP for vSphere
KMIP Multi CA
TDE
TDE for MSSQL
TDE for Oracle
Tokenization
Batch Tokenizations
Password Manager
Password Manager Web Console
Viewing Options: Cards, List, Sort, Filter and Pagination
Signing In Through the Browser Extension
Personal Secrets
Corporate Secrets
Favorites
Recycle Bin
Security Health
Creating Items
Importing from Another Password Manager
Downloads: Extension and Desktop App
Settings
Editing, Sharing and Deleting Items
Password Manager Web Extension
Installation & Supported Browsers
Side Panel & Sidebar
Signing In to the Web Extension
Personal, Corporate & Favorites Navigation
Folder Navigation within Personal & Corporate Areas
Personal Secrets
Corporate Secrets
Password / Secrets List: Switching Between Folders & Flat View
Using Filters & Tags
Searching for Passwords and Secrets
Selecting Multiple Items
Item Types Reference
Creating New Password
Creating New Secret
Creating New Secret Value Type
Editing, Copying & Moving Items
Password Generator & Strength
Viewing an Item
Creating New File Item
Setting Password Policy On Account Level
Sharing Password / Secret
Deleting Password / Secret
Recycle Bin
Adding Items To Favorites
Using Autofill / Password Injection
Launch: Open a Site Already Signed In
Prompt to Save Password
AI Agent Autofill
Copy/Paste & Secure Paste Mode
Adding and Using One-Time Passwords
Adding Manual OTP
Passkey
Importing from Another Password Manager
Preconfigured Installs: Overview
Security Health in the Extension
Bridge Link Install
Preconfigured Package
Extension Settings
Accessibility
Branding & Customization
Account Policies Affecting the Extension
Troubleshooting
SA Web Extension (Secrets Automation)
Password Manager Desktop Application
Installing the Desktop Application
Offline Mode
Unlocking the Offline Vault
Auto-Type and Quick Access
Desktop Settings
Working With Your Vault on the Desktop
Secure Remote Access
Overview
Getting Started
Quick Start
Connecting Your First SRA Resource
Setup
Choose a Deployment Model
SRA on Kubernetes
Kubernetes Advanced Configuration
SRA on Docker Compose
Docker Compose Advanced Configuration
Zero Trust Web Access
Zero Trust Web Access on K8s
Zero Trust Web Access on K8s Advanced Configuration
Zero Trust Web Access on Docker
SRA Requirements
Configure SRA
Access Configuration and Policies
SRA RBAC Model
Redirect and SSH URL Hardening
Username Sub-Claim Mapping
Session TTL and Security Controls
Desktop App Default Connection Settings
Session Management
Sessions Overview
RDP Recordings
Web Access Session Recording
Version Drift and Upgrade Signals
Infrastructure and Capacity Planning
Runtime Components and Ports
Scaling and HPA Patterns
Storage and Recording Capacity
Troubleshooting and Migration
Session Drops and Timeout Runbooks
Sticky Sessions and Ingress Patterns
Cluster and Instance Health
Legacy to Unified Migration
Integrations and Automation
CLI Commands and Flags
API and SDK Workflows
Session Forwarding Destinations
Supported Resource Types
Database Access
Remote Desktop Access
AWS Console Access
Azure Portal Access
GCP Portal Access
SSH Access
LDAP Access
RabbitMQ Access
Kubernetes Cluster Access
Zero Trust Web Applications Access
Tunnels
Akeyless Connect
SSH Certificates
Accessing Resources
Portal Login and Target Discovery
Web Access (Browsing / Proxy)
Akeyless File Transfer
Request Access and Approval Flow
Desktop Application
Universal Secret Connector
Universal Secrets Connector
AWS Universal Secrets Connector
Azure Universal Secrets Connector
GCP Universal Secrets Connector
HashiCorp Vault Universal Secrets Connector
Kubernetes Universal Secrets Connector
GitHub Universal Secret Connector
Sync Secrets
Sync a Rotated Secret
Sync a Static Secret
AI Security
AI Security With Akeyless
Akeyless AI Insights
Identity & Secrets Intelligence
Scanners
Akeyless Scanner
AWS Scanner
Azure Scanner
GCP Scanner
GitHub Scanner
GitLab Scanner
Kubernetes Scanner
Policies
Secret Policies
Identity Policies
Certificate Policies
AI Agents Policies
Agentic Runtime Authority
MCP Server
Claude
Cursor
GitHub Copilot
Akeyless MCP Plugin for JetBrains IDEs
Prompt Injection Protection for AI Agents
Customer Journeys
Customer Journeys
Access Requests with ServiceNow
Docker setup and configuration
Create a Gateway in Akeyless System
Set Up Event Forwarder on Akeyless System
Install and Activate Event Management Plugin in ServiceNow
Create an "Event Received" Endpoint in ServiceNow
Create a Table in ServiceNow
Develop a Script to Parse the JSON Body
Set Up a Flow in ServiceNow
Create a Script for Approval/Decline Actions
Automated Onboarding
Establish a New Employee Table in ServiceNow's Global Scope
Create a Table Form for New Record Entries
Custom Action in ServiceNow For SAML Auth
Custom Action in ServiceNow For Email Auth
Create WorkFlow
beyond-env-building-a-dynamic-only-secretless-ai-agent-with-google-adk
Integrations & Plugins
CLI
CLI Profiles
CLI Reference
CLI Reference - Authentication
CLI Reference - Kubernetes Auth Method
CLI Reference - LDAP Auth Method
CLI Reference - Universal Identity
CLI Reference - Kerberos
CLI Reference - Access Roles
CLI Reference - Certificates
CLI Reference - Dynamic Secrets
CLI Reference - Encryption Keys
CLI Reference - Event Forwarders
CLI Reference - Gateway
CLI Reference - Gateway Secure Remote Access
CLI Reference - Connect
CLI Reference - Log-Forwarding
CLI Reference - Automatic Migration
CLI Reference - KMIP
CLI Reference - Rotated Secrets
CLI Reference - Static Secrets
CLI Reference - Targets
CLI Reference - Universal Secrets Connector
MCPs
Plugins
Ansible Plugins
Ansible Plugin
Ansible AWX Plugin
Apache Airflow Provider
AWS Databricks Plugin
Azure Plugins
Azure DevOps Extension
Azure DevOps with Vault Proxy Plugin
Chef Infra Plugin
Chef InSpec Plugin
CircleCI Plugin
Consul Template Plugin
Akeyless Secrets Manager for Cursor
GitHub Actions Plugin
GitLab Plugin
gRPC
HashiCorp Vault Proxy
GitHub Actions by way of HashiCorp Vault Proxy
HashiCorp Vault Proxy Authentication Methods
Vault Proxy Configuration
Jenkins Plugin by way of HashiCorp Vault Proxy
TeamCity Plugin by way of HashiCorp Vault Proxy
Hashicorp Vault Proxy Legacy Configuration
Jenkins Plugin
Keycloak Plugin
Kubernetes Plugins
Authentication Methods for Kubernetes
Policy Segregation for Kubernetes
Akeyless Kubernetes Secrets Injector
External Secrets Operator
Kubernetes Secrets Store CSI Driver
Cert Manager
n8n nodes akeyless
Red Hat OpenShift
Puppet Plugin
Slack Plugin
SPIRE Plugins
SPIRE Key Manager
SPIRE Secret Manager
SPIRE Upstream Authority
SPIRE Upstream Authority SM
Steampipe Plugin
TeamCity Plugin
Terraform Provider
Python CDKTF
Venafi Integration
Venafi Cert Manager
Venafi Cloud
Venafi Trust Protection Platform (TPP)
Azure Databricks Plugin
Akeyless SDKs
C# .NET Core SDK
Go SDK
Java SDK
JavaScript SDK
Python SDK
Ruby SDK
PowerShell Usage
ServiceNow Integration
ServiceNow Credential Resolver
Advanced Functionality
Account Settings
Custom Fields
Encryption Key Policies
Email Templating
Analytics
Usage Reports
Audit Logs
Log Actions
Automatic Migration
Resource Discovery
Server Inventory
Akeyless Agent
Best Practices
SRA Best Practices
Break-Glass Access Best Practices
Web Access Bastion Best Practices
AWS Best Practices
AWS Roles for Distributed Gateway Using Terraform
AWS Roles for Centralized Gateway Using Terraform
AWS Partition and Deployment Support
Bulk Operations
Custom Username for Dynamic Secrets
Event Center
Email Event Forwarder
Webhook Event Forwarder
ServiceNow Event Forwarder
Slack Event Forwarder
Teams Event Forwarder
FIPS Mode
Folder Management
Freezing or Deleting Customer Information
Item Deletion
Monitor Your Environment
Multiple Accounts
OIDC Identity Provider
Request Access
BREAKING CHANGES
Gateway v5.0.0
CLI Reference - Automatic Migration
Copy Page
