LXGIC Vault - Secure Password Manager

Overview

LXGIC Vault provides a REST API for programmatic access to your encrypted credentials. All vault data is encrypted client-side with AES-256-GCM before being stored - the server never sees your plaintext data.

Base URL

https://lxgic-vault.vercel.app/api/v1

Authentication

All API requests require an API key passed in the Authorization header:

curl -H "Authorization: Bearer lxv_your_api_key" \
  https://lxgic-vault.vercel.app/api/v1/vault

Creating an API Key

Log into your vault at lxgic-vault.vercel.app
Go to the Developer tab
Click Create API Key
Select scopes (read, write, delete, or full access)
Enter your master password to generate the AI encryption key
Copy the key - it's only shown once!

API Key Scopes

Scope	Description
read	Read AI-approved credentials
write	Add new credentials (go to pending queue)
delete	Delete credentials (rarely granted)
*	Full access

Endpoints

GET/api/v1/vault

Get the encrypted vault data and AI key salt.

{
  "data": {
    "ai_encrypted_data": "base64_encrypted_string",
    "ai_key_salt": "hex_string",
    "type": "personal|team",
    "read_access": true
  }
}

PUT/api/v1/vault

Add a new credential to the pending queue.

Request Body:

{
  "encrypted_credential": "base64_encrypted_credential",
  "credential_type": "password|api_key|secret|ssh_key|crypto_key|payment|other",
  "credential_name": "My Credential Name"
}

Response:

{
  "data": {
    "queued": true,
    "message": "Credential saved. It will appear in the vault when the user unlocks it."
  }
}

GET/api/v1/expenses

List all AI-added expenses.

{
  "data": {
    "expenses": [
      {
        "id": "uuid",
        "description": "Supabase Pro",
        "amount": 25.00,
        "category": "Infrastructure",
        "date": "2026-01-30",
        "recurring": true,
        "recurringInterval": "monthly"
      }
    ]
  }
}

POST/api/v1/expenses

Add a new expense.

{
  "description": "Vercel Pro",
  "amount": 20.00,
  "category": "Infrastructure",
  "date": "2026-01-30",
  "recurring": true,
  "recurringInterval": "monthly"
}

GET/api/v1/keys

List all API keys for the authenticated user.

POST/api/v1/keys

Create a new API key.

DELETE/api/v1/keys

Revoke an API key.

GET/api/v1/audit

Get audit log entries.

Error Responses

{
  "error": "Error message here"
}

Status	Meaning
400	Bad request - missing or invalid parameters
401	Unauthorized - invalid or missing API key
403	Forbidden - API key lacks required scope
429	Rate limit exceeded (100 req/min)