Re-encrypt

Add MCP server to your AI tool

Allow AI tools and LLMs to interact with the API documentation portal through MCP.

MCP server URL

https://openapi-v2.exoscale.com/mcp

Standard setup for AI tools providing an mcp.json file

mcp.json 
{
  "Exoscale APIv2 MCP server": {
    "url": "https://openapi-v2.exoscale.com/mcp"
  }
}
Close
POST /kms-key/{id}/re-encrypt

Decrypts an existing ciphertext using its original key material and re-encrypts the underlying plaintext using a specified KMS key or the latest key material of the same KMS Key.

Path parameters

  • id string(uuid) Required
application/json

Body Required

  • source object Required
    Hide source attributes Show source attributes object
    • key string(uuid) Required

      The ID of the source key currently protecting the data payload.

    • encryption-context string(byte) | null

      Optional Base64-encoded encryption context originally appended to the AAD to confirm package validation rules.

    • ciphertext string(byte) Required

      The Base64-encoded encrypted payload package ready to undergo source-side key decryption.

  • destination object Required
    Hide destination attributes Show destination attributes object
    • key string(uuid) Required

      The ID of the target key chosen to encapsulate the newly shifted data translation.

    • encryption-context string(byte) | null

      Optional new Base64-encoded encryption context to apply under the target destination envelope.

Responses

  • 200 application/json

    Base64 encoded ciphertext

    Hide response attribute Show response attribute object
    • ciphertext string(byte) Required

      The new Base64-encoded ciphertext block safely wrapped by the chosen destination key parameters.
  • 400 application/json

    Errors

    Key Not Found: The request was rejected because the specified KMS Key could not be found.

    Key is Disabled: The request was rejected because the specified KMS key is disabled.

    Not on Default: The request was rejected because the operation is not allowed on the default key.

    Bad Request: The request was rejected because of an invalid request body or path parameter.

    Hide response attributes Show response attributes object
    • type string(uri-reference) Required

      An absolute or relative URI reference pointing to human-readable documentation concerning the specific problem type encountered.

    • title string Required

      A brief summary defining the class of failure, optimal for quick user interface groupings.

    • status integer Required

      Minimum value is 100, maximum value is 599.

    • detail string Required

      A highly contextual, readable explanation breaking down explicitly what triggered this error scenario.
POST /kms-key/{id}/re-encrypt 
curl \
 --request POST 'https://api-ch-gva-2.exoscale.com/v2/kms-key/{id}/re-encrypt' \
 --header "Content-Type: application/json" \
 --data '{"source":{"key":"string","encryption-context":"string","ciphertext":"string"},"destination":{"key":"string","encryption-context":"string"}}'
Request examples 
{
  "source": {
    "key": "string",
    "encryption-context": "string",
    "ciphertext": "string"
  },
  "destination": {
    "key": "string",
    "encryption-context": "string"
  }
}
Response examples (200) 
{
  "ciphertext": "string"
}
Response examples (400) 
{
  "type": "string",
  "title": "string",
  "status": 42,
  "detail": "string"
}