One-shot 1Password .1pux or CSV onto origin. Secret in the file, never in the response. Not MCP.

POST/v1/import

Authorization

AuthorizationBearer token (JWT) · headerrequired

Hydra JWT. Identity is the bound agent or a Keto member human. The host is not identity.

Query parameters

filenamestring

export.1pux or chrome.csv. Sniffed from bytes when empty.

Request body

requiredapplication/octet-stream

string<binary>

Responses

200Created item names. No secrets.

namesstring[]required

countintegerrequired

400bad request

401missing or invalid Bearer

403agent cannot import

Request

curl -X POST "https://veil.nyc/v1/import" \
  -H "Authorization: Bearer YOUR_TOKEN" \
  -H "Content-Type: application/octet-stream" \
  -d '"<binary>"'

const response = await fetch("https://veil.nyc/v1/import", {
  method: "POST",
  headers: {
    "Authorization": "Bearer YOUR_TOKEN",
    "Content-Type": "application/octet-stream"
  },
  body: JSON.stringify("<binary>")
});

import requests

response = requests.post(
    "https://veil.nyc/v1/import",
    headers={
        "Authorization": "Bearer YOUR_TOKEN",
        "Content-Type": "application/octet-stream"
    },
    json="<binary>",
)

Response

{
  "names": [
    "string"
  ],
  "count": 0
}