Menú

Referencia de la API · Bóveda

Etiquetas

vault · labels · 5 operaciones

GET/v1/vault/labelsList vault labels POST/v1/vault/labels/{label_id}/detachRemove a label from every vault credential POST/v1/vault/labelsCreate a vault label PATCH/v1/vault/labels/{label_id}Edit a vault label DELETE/v1/vault/labels/{label_id}Delete a vault label

GET/v1/vault/labels

List vault labels

vault.labels.list

LecturaIdempotenteDesde 2026-11-01

Lists the labels used to tag Vault credentials (id, name, hex color, order), in the order the app shows them, paginated by cursor (limit up to 200; up to 1000 labels). Use their ids in label_ids when creating or updating credentials, in vault.items.bulk.update_labels and to filter vault.items.list. Create, edit and delete them with vault.labels.create, update and delete. Requires view access to the Vault.

Alcance: vault:read
Permiso: Ver el módulo
Tool del MCP: vault_labels_listEn la superficie completa; en la compacta, mb_execute_operation con id: "vault.labels.list".

Costo declarado: hasta 1000 lecturas y 0 escrituras por llamada (cuentan en el cupo diario).

Parámetros

limitintegerqueryopcional

How many items this page brings at most (see the maximum and the default in the schema).

Por defecto: 50

cursorstringqueryopcional

The next_cursor of the previous page, exactly as it came (only for the same list and filters); without it, the first page.

Respuesta

dataarray<object>

has_moreboolean

next_cursorstring

Errores

invalid_input unknown_field authentication_required scope_insufficient module_access_denied operation_not_found rate_limited quota_exceeded

Ejemplo

curl "https://api.mb-suite.com/v1/vault/labels" \
  -H "Authorization: Bearer $MB_API_KEY"

Probar con tu API key de prueba

Con una API key de prueba el pedido va siempre a tu organización de práctica: datos de ejemplo que puedes reiniciar.

curl "https://api.mb-suite.com/v1/vault/labels" \
  -H "Authorization: Bearer $MB_TEST_KEY"

POST/v1/vault/labels/{label_id}/detach

Remove a label from every vault credential

vault.labels.detach

EscrituraIdempotenteDesde 2026-11-01

Removes one label from every credential of the Vault that carries it, including credentials with custom access (it only touches their label list, which belongs to the organization). The label itself is not deleted (vault.labels.delete deletes it and runs this same step). It does not require the label to still exist, so it also cleans an id left behind. Idempotent: a label that no credential has returns updated 0. Requires edit access to the Vault.

Alcance: vault:write
Permiso: Editar en el módulo
Tool del MCP: vault_labels_detachEn la superficie completa; en la compacta, mb_execute_operation con id: "vault.labels.detach".

Costo declarado: hasta 400 lecturas y 400 escrituras por llamada (cuentan en el cupo diario).

Parámetros

label_idstringrutarequerido

The label's id (from vault.labels.list, or one left on a credential).

Respuesta

label_idstring

updatednumber

Errores

invalid_input unknown_field authentication_required scope_insufficient crm_action_denied idempotency_key_reused rate_limited quota_exceeded

Ejemplo

curl -X POST "https://api.mb-suite.com/v1/vault/labels/{label_id}/detach" \
  -H "Authorization: Bearer $MB_API_KEY"

Probar con tu API key de prueba

Con una API key de prueba el pedido va siempre a tu organización de práctica: datos de ejemplo que puedes reiniciar.

curl -X POST "https://api.mb-suite.com/v1/vault/labels/{label_id}/detach" \
  -H "Authorization: Bearer $MB_TEST_KEY"

POST/v1/vault/labels

Create a vault label

vault.labels.create

EscrituraDesde 2026-11-01

Creates a Vault label (name and an optional #rrggbb color; without it, the next color of the app's palette), at the end of the manual order. Up to 200 labels per organization (409 limit_reached). Returns label_id and the label: use it in label_ids of vault.items.create or update. Requires edit access to the Vault.

Alcance: vault:write
Permiso: Editar en el módulo
Tool del MCP: vault_labels_createEn la superficie completa; en la compacta, mb_execute_operation con id: "vault.labels.create".

Costo declarado: hasta 1 lecturas y 1 escrituras por llamada (cuentan en el cupo diario).

Parámetros

namestringcuerporequerido

The label's name.

colorstringcuerpoopcional

A hex color, #rrggbb (default: the next one of the app's palette).

Respuesta

label_idstring

labelobject

Errores

invalid_input unknown_field authentication_required scope_insufficient crm_action_denied idempotency_key_reused rate_limited quota_exceeded

Ejemplo

curl -X POST "https://api.mb-suite.com/v1/vault/labels" \
  -H "Authorization: Bearer $MB_API_KEY" \
  -H "Content-Type: application/json" \
  -H "Idempotency-Key: $(uuidgen)" \
  -d '{
  "name": "NAME"
}'

Probar con tu API key de prueba

Con una API key de prueba el pedido va siempre a tu organización de práctica: datos de ejemplo que puedes reiniciar.

curl -X POST "https://api.mb-suite.com/v1/vault/labels" \
  -H "Authorization: Bearer $MB_TEST_KEY" \
  -H "Content-Type: application/json" \
  -H "Idempotency-Key: $(uuidgen)" \
  -d '{
  "name": "NAME"
}'

PATCH/v1/vault/labels/{label_id}

Edit a vault label

vault.labels.update

EscrituraIdempotenteDesde 2026-11-01

Renames a Vault label, changes its color (#rrggbb) or its place in the manual order. Only what is sent changes; the same values change nothing (changed: false). The credentials that carry it keep it. Returns the label. Requires edit access to the Vault.

Alcance: vault:write
Permiso: Editar en el módulo
Tool del MCP: vault_labels_updateEn la superficie completa; en la compacta, mb_execute_operation con id: "vault.labels.update".

Costo declarado: hasta 1 lecturas y 1 escrituras por llamada (cuentan en el cupo diario).

Parámetros

label_idstringrutarequerido

The label's id (from vault.labels.list).

updatesobjectcuerporequerido

The fields to change.

Respuesta

labelobject

changedboolean

Errores

vault_label_not_found invalid_input unknown_field authentication_required scope_insufficient crm_action_denied idempotency_key_reused rate_limited quota_exceeded

Ejemplo

curl -X PATCH "https://api.mb-suite.com/v1/vault/labels/{label_id}" \
  -H "Authorization: Bearer $MB_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
  "updates": {}
}'

Probar con tu API key de prueba

Con una API key de prueba el pedido va siempre a tu organización de práctica: datos de ejemplo que puedes reiniciar.

curl -X PATCH "https://api.mb-suite.com/v1/vault/labels/{label_id}" \
  -H "Authorization: Bearer $MB_TEST_KEY" \
  -H "Content-Type: application/json" \
  -d '{
  "updates": {}
}'

DELETE/v1/vault/labels/{label_id}

Delete a vault label

vault.labels.delete

IrreversibleDesde 2026-11-01

Deletes a Vault label and removes it from every credential that carries it, including credentials with custom access (it only touches their label list; up to 4,000, more is 409 too_many_labeled_items). The label goes to the 30-day trash with the credentials it was on: platform.trash.restore brings it back. Outside the app it requires a dry run (which says how many credentials carry it) and a confirm_token, except a REST DELETE with a key allowed to delete. Returns items_unlabeled. Requires edit access to the Vault.

Con una API key, este DELETE se ejecuta directo: el registro queda 30 días en la papelera y la respuesta trae su trash_item_id. Con un token OAuth, y por el MCP, pide dry_run → confirm_token.

Alcance: vault:write y «Permitir eliminar» (vault:delete en OAuth)
Permiso: Editar en el módulo
Tool del MCP: vault_labels_deleteEn la superficie completa; en la compacta, mb_execute_operation con id: "vault.labels.delete".

Costo declarado: hasta 4012 lecturas y 4002 escrituras por llamada (cuentan en el cupo diario).

Parámetros

label_idstringrutarequerido

The label's id (from vault.labels.list, or one left on a credential).

Respuesta

oktrue

items_unlabelednumber

trash_item_idstring

The trash item this deletion left: the item_id of platform.trash.restore (POST /trash/{item_id}/restore). Missing if nothing went to the trash.

trash_item_idsarray<string>

Only when the deletion left more than one copy: all of them, the first being trash_item_id.

trash_expires_atnumber

When the copy leaves the trash for good (epoch ms): 30 days after the deletion.

Errores

vault_label_not_found delete_not_allowed confirmation_required invalid_input unknown_field authentication_required scope_insufficient crm_action_denied idempotency_key_reused rate_limited quota_exceeded

Ejemplo

curl -X DELETE "https://api.mb-suite.com/v1/vault/labels/{label_id}" \
  -H "Authorization: Bearer $MB_API_KEY"

Probar con tu API key de prueba

Con una API key de prueba el pedido va siempre a tu organización de práctica: datos de ejemplo que puedes reiniciar.

curl -X DELETE "https://api.mb-suite.com/v1/vault/labels/{label_id}" \
  -H "Authorization: Bearer $MB_TEST_KEY"