1--- 2layout: "api" 3page_title: "/sys/raw - HTTP API" 4sidebar_title: "<code>/sys/raw</code>" 5sidebar_current: "api-http-system-raw" 6description: |- 7 The `/sys/raw` endpoint is used to access the raw underlying store in Vault. 8--- 9 10# `/sys/raw` 11 12The `/sys/raw` endpoint is used to access the raw underlying store in Vault. 13 14This endpoint is off by default. See the 15[Vault configuration documentation](/docs/configuration/index.html) to 16enable. 17 18## Read Raw 19 20This endpoint reads the value of the key at the given path. This is the raw path 21in the storage backend and not the logical path that is exposed via the mount 22system. 23 24| Method | Path | 25| :--------------------------- | :--------------------- | 26| `GET` | `/sys/raw/:path` | 27 28### Parameters 29 30- `path` `(string: <required>)` – Specifies the raw path in the storage backend. 31 This is specified as part of the URL. 32 33### Sample Request 34 35``` 36$ curl \ 37 ---header "X-Vault-Token: ..." \ 38 http://127.0.0.1:8200/v1/sys/raw/secret/foo 39``` 40 41### Sample Response 42 43```json 44{ 45 "value": "{'foo':'bar'}" 46} 47``` 48 49## Create/Update Raw 50 51This endpoint updates the value of the key at the given path. This is the raw 52path in the storage backend and not the logical path that is exposed via the 53mount system. 54 55| Method | Path | 56| :--------------------------- | :--------------------- | 57| `PUT` | `/sys/raw/:path` | 58 59### Parameters 60 61- `path` `(string: <required>)` – Specifies the raw path in the storage backend. 62 This is specified as part of the URL. 63 64- `value` `(string: <required>)` – Specifies the value of the key. 65 66### Sample Payload 67 68```json 69{ 70 "value": "{\"foo\": \"bar\"}" 71} 72``` 73 74### Sample Request 75 76``` 77$ curl \ 78 --header "X-Vault-Token: ..." \ 79 --request PUT \ 80 --data @payload.json \ 81 http://127.0.0.1:8200/v1/sys/raw/secret/foo 82``` 83 84## List Raw 85 86This endpoint returns a list keys for a given path prefix. 87 88**This endpoint requires 'sudo' capability.** 89 90| Method | Path | 91| :--------------------------- | :--------------------- | 92| `LIST` | `/sys/raw/:prefix` | 93| `GET` | `/sys/raw/:prefix?list=true` | 94 95 96### Sample Request 97 98``` 99$ curl \ 100 --header "X-Vault-Token: ..." \ 101 --request LIST \ 102 http://127.0.0.1:8200/v1/sys/raw/logical 103``` 104 105### Sample Response 106 107```json 108{ 109 "data":{ 110 "keys":[ 111 "abcd-1234...", 112 "efgh-1234...", 113 "ijkl-1234..." 114 ] 115 } 116} 117``` 118 119## Delete Raw 120 121This endpoint deletes the key with given path. This is the raw path in the 122storage backend and not the logical path that is exposed via the mount system. 123 124| Method | Path | 125| :--------------------------- | :--------------------- | 126| `DELETE` | `/sys/raw/:path` | 127 128### Parameters 129 130- `path` `(string: <required>)` – Specifies the raw path in the storage backend. 131 This is specified as part of the URL. 132 133### Sample Request 134 135``` 136$ curl \ 137 --header "X-Vault-Token: ..." \ 138 --request DELETE \ 139 http://127.0.0.1:8200/v1/sys/raw/secret/foo 140``` 141