mirror of
https://github.com/SHOGGOTH-SECTOR/sica-fondt.git
synced 2026-08-01 08:30:20 +00:00
24f816b6a3
Place useful parts of the surrounding repos into sica-fondt by layer, per the
body model (Ada = membrane; brain/endocrine/capabilities/knowledge non-Ada):
- brain/ LLM reasoning + providers (dapr, hermes, MoMoA)
- capabilities/ REPRAG sidecars: hermes tools/skills, dapr tools, parallel
dispatch, A51 channels, and the OSINT cluster
- knowledge/ LORAG corpus: 754 cyber-skills, agency personas, secure-coding,
MITRE ATT&CK data
- reference/ defensive threat-reference (C3, shhbruh doc) + AdaYaml parser
License handling: AGPL sources (worldosint, advanced_evolution, mercury,
Reticulum) and GPL DeTTECT are SPEC-only clean-room/port descriptions — no
copyleft code copied. MIT/Apache/data parts copied as working trees.
Safety: shhbruh escape/persistence material and C3 covert-C2 kept as reference
only, not wired into the running organism. See CONSOLIDATION.md.
https://claude.ai/code/session_01UehUqEXXJJCsHoA4voCU5c
64 lines
2.3 KiB
Markdown
64 lines
2.3 KiB
Markdown
# API Reference: Implementing Delinea Secret Server for PAM
|
|
|
|
## Libraries
|
|
|
|
### requests (HTTP client for REST API)
|
|
- **Install**: `pip install requests`
|
|
- Used to interact with Secret Server REST API v1
|
|
|
|
## Secret Server REST API
|
|
|
|
### Authentication
|
|
- **Endpoint**: `POST /oauth2/token`
|
|
- **Grant type**: `password`
|
|
- **Parameters**: `username`, `password`, `domain` (optional)
|
|
- **Returns**: `access_token` (Bearer token)
|
|
|
|
### Secrets API
|
|
|
|
| Endpoint | Method | Description |
|
|
|----------|--------|-------------|
|
|
| `/api/v1/secrets` | GET | Search/list secrets |
|
|
| `/api/v1/secrets/{id}` | GET | Get secret by ID |
|
|
| `/api/v1/secrets` | POST | Create new secret |
|
|
| `/api/v1/secrets/{id}` | PUT | Update secret |
|
|
| `/api/v1/secrets/{id}/change-password` | POST | Trigger password rotation |
|
|
| `/api/v1/secrets/{id}/check-out` | POST | Check out for exclusive access |
|
|
| `/api/v1/secrets/{id}/check-in` | POST | Release checked-out secret |
|
|
| `/api/v1/secrets/{id}/audits` | GET | Audit trail for secret |
|
|
| `/api/v1/secrets/{id}/fields/{slug}` | GET | Get specific field value |
|
|
|
|
### Folders API
|
|
|
|
| Endpoint | Method | Description |
|
|
|----------|--------|-------------|
|
|
| `/api/v1/folders` | GET | List folders |
|
|
| `/api/v1/folders/{id}` | GET | Get folder details |
|
|
| `/api/v1/folders` | POST | Create folder |
|
|
|
|
### Administration API
|
|
|
|
| Endpoint | Method | Description |
|
|
|----------|--------|-------------|
|
|
| `/api/v1/users` | GET | List users |
|
|
| `/api/v1/roles` | GET | List roles |
|
|
| `/api/v1/secret-templates` | GET | List secret templates |
|
|
| `/api/v1/configuration/general` | GET | Server configuration |
|
|
|
|
## Common Secret Templates
|
|
- **Windows Account**: Domain, username, password
|
|
- **Unix Account (SSH)**: Host, username, private key
|
|
- **SQL Server Account**: Server, database, username, password
|
|
- **Web Password**: URL, username, password
|
|
|
|
## Search Filters
|
|
- `filter.searchText` -- Keyword search
|
|
- `filter.folderId` -- Filter by folder
|
|
- `filter.secretTemplateId` -- Filter by template
|
|
- `filter.includeSubFolders` -- Include nested folders
|
|
|
|
## External References
|
|
- Secret Server REST API: https://docs.delinea.com/online-help/secret-server/api-scripting/rest-api-reference/
|
|
- Secret Server SDK: https://github.com/DelineaXPM/python-tss-sdk
|
|
- PAM Best Practices: https://docs.delinea.com/online-help/secret-server/
|