1---
2layout: "api"
3page_title: "/sys/raw - HTTP API"
4sidebar_title: "<code>/sys/raw</code>"
5sidebar_current: "api-http-system-raw"
6description: |-
7  The `/sys/raw` endpoint is used to access the raw underlying store in Vault.
8---
9
10# `/sys/raw`
11
12The `/sys/raw` endpoint is used to access the raw underlying store in Vault.
13
14This endpoint is off by default.  See the
15[Vault configuration documentation](/docs/configuration/index.html) to
16enable.
17
18## Read Raw
19
20This endpoint reads the value of the key at the given path. This is the raw path
21in the storage backend and not the logical path that is exposed via the mount
22system.
23
24| Method   | Path                         |
25| :--------------------------- | :--------------------- |
26| `GET`    | `/sys/raw/:path`             |
27
28### Parameters
29
30- `path` `(string: <required>)` – Specifies the raw path in the storage backend.
31  This is specified as part of the URL.
32
33### Sample Request
34
35```
36$ curl \
37    ---header "X-Vault-Token: ..." \
38    http://127.0.0.1:8200/v1/sys/raw/secret/foo
39```
40
41### Sample Response
42
43```json
44{
45  "value": "{'foo':'bar'}"
46}
47```
48
49## Create/Update Raw
50
51This endpoint updates the value of the key at the given path. This is the raw
52path in the storage backend and not the logical path that is exposed via the
53mount system.
54
55| Method   | Path                         |
56| :--------------------------- | :--------------------- |
57| `PUT`    | `/sys/raw/:path`             |
58
59### Parameters
60
61- `path` `(string: <required>)` – Specifies the raw path in the storage backend.
62  This is specified as part of the URL.
63
64- `value` `(string: <required>)` – Specifies the value of the key.
65
66### Sample Payload
67
68```json
69{
70  "value": "{\"foo\": \"bar\"}"
71}
72```
73
74### Sample Request
75
76```
77$ curl \
78    --header "X-Vault-Token: ..." \
79    --request PUT \
80    --data @payload.json \
81    http://127.0.0.1:8200/v1/sys/raw/secret/foo
82```
83
84## List Raw
85
86This endpoint returns a list keys for a given path prefix.
87
88**This endpoint requires 'sudo' capability.**
89
90| Method   | Path                         |
91| :--------------------------- | :--------------------- |
92| `LIST`   | `/sys/raw/:prefix` |
93| `GET`   | `/sys/raw/:prefix?list=true` |
94
95
96### Sample Request
97
98```
99$ curl \
100    --header "X-Vault-Token: ..." \
101    --request LIST \
102    http://127.0.0.1:8200/v1/sys/raw/logical
103```
104
105### Sample Response
106
107```json
108{
109  "data":{
110    "keys":[
111      "abcd-1234...",
112      "efgh-1234...",
113      "ijkl-1234..."
114    ]
115  }
116}
117```
118
119## Delete Raw
120
121This endpoint deletes the key with given path. This is the raw path in the
122storage backend and not the logical path that is exposed via the mount system.
123
124| Method   | Path                         |
125| :--------------------------- | :--------------------- |
126| `DELETE` | `/sys/raw/:path`             |
127
128### Parameters
129
130- `path` `(string: <required>)` – Specifies the raw path in the storage backend.
131  This is specified as part of the URL.
132
133### Sample Request
134
135```
136$ curl \
137    --header "X-Vault-Token: ..." \
138    --request DELETE \
139    http://127.0.0.1:8200/v1/sys/raw/secret/foo
140```
141