> ## Documentation Index
> Fetch the complete documentation index at: https://docs.ozura.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Vault API Overview

> Base URL and authentication for Ozura Vault API.

# Vault API

Reference for Ozura Vault endpoints. For integration steps and concepts, see the [Vault Guides](/guides/vault/overview).

Deployed backends may use different hostnames (e.g. Azure); the path segments below are correct regardless. There is no version prefix (e.g. no `/v1`).

## Authentication

All requests require one of:

* **API Key** — `X-API-Key` header (server-to-server). Get an API key by creating an account at [Ozura Vault](https://ozuravault.com). **POST /tokenize** and **POST /test-tokens** also require **X-Pub-Key** when using a production vault API key. If your API key is a test/sandbox key, `X-Pub-Key` is not required. For a production pub key, contact **[ammar@ozura.com](mailto:ammar@ozura.com)**. See [Verify API Key](/api-reference/vault/verify-api-key).
* **JWT** — `Authorization: Bearer <token>` or cookie (user context).

Details: [Authentication](/api-reference/vault/authentication).

## Endpoints

| Method | Path                                                         | Description                                      |
| ------ | ------------------------------------------------------------ | ------------------------------------------------ |
| POST   | [/tokenize](/api-reference/vault/tokenize)                   | Create a token from card or bank data            |
| POST   | [/proxy/transaction](/api-reference/vault/proxy-transaction) | Forward request to a PSP with card data injected |
| GET    | [/api/applications/key](/api-reference/vault/verify-api-key) | Verify API key and read permissions              |
| —      | [Authentication](/api-reference/vault/authentication)        | API key vs JWT, which endpoints use which        |

\| POST | [Test tokens](/api-reference/vault/test-tokens) | Create test token with long-lived CVC (X-Pub-Key + API key/JWT) |
\| GET/POST/PUT/DELETE | [Applications](/api-reference/vault/applications) | Create, list, update, delete apps; verify key (API key) |

## Errors

* [Errors overview](/api-reference/vault/errors-overview)
* [HTTP status codes](/api-reference/vault/status-codes)
* [Common errors and solutions](/api-reference/vault/common-errors)