External vault integration

Enterprise and uses: Insomnia
Related Documentation
Minimum Version
Insomnia - 11

Insomnia supports integrating with external vault service providers to retrieve secret values automatically when sending requests.

You can configure vault integration from the Insomnia UI, in Preferences > Cloud Credentials, and in Inso CLI, using environment variables.

Insomnia supports the following vault services:

AWS Secrets Manager

Insomnia doesn’t support spaces in the SSO session name. If you select the SSO Credential type, make sure your SSO session name contains only supported characters:

  • Letters
  • Numbers
  • Hyphens (-)
  • Underscores (_)

GCP Secret Manager

HashiCorp Vault

Azure Key Vault

  1. Navigate to Preferences > Cloud Credentials.
  2. Click Add Credentials, select Azure.
  3. You will be redirected to authorize Insomnia in your browser.
  4. After authorization, you’ll return to Insomnia with your Azure account credential added.

Using secrets

External vault secrets can be referenced anywhere in Insomnia requests using template tags. In the field of your choice:

  1. Press Control+Space.
  2. Select the external vault to use.
  3. Fill in the details required to access the secret.

Vault secrets cache

Vault secret caching works like the following in Insomnia:

  • Secrets retrieved from cloud vault services are cached in memory for 30 minutes by default.
  • If the cache expires or is missing, Insomnia re-fetches the secret automatically.
  • You can configure cache duration and reset the cache in Preferences > Cloud Credentials.
Something wrong?

Help us make these docs great!

Kong Developer docs are open source. If you find these useful and want to make them better, contribute today!