Upstash

Overview

Use Upstash credentials to make authenticated API calls through Alter Vault without exposing API keys in code.

Property	Value
Template ID	upstash
Category	Database
Credential Type	REST Token

Step 1: Get Credentials

Log in to the Upstash Console

Log in to the Upstash Console.

Open the database

Open the database; its page shows the Endpoint and the Token / Readonly Token.

Copy the token

Copy the Token (or the Readonly Token for read-only integrations).

Warning

Never share credentials publicly. Store them securely and only enter them in the Alter Vault Developer Portal.

Step 2: Add to Alter Vault

Open the Developer Portal

Go to portal.alterauth.com and navigate to the application.

Add Upstash

Go to Managed Secrets > Add Provider > Upstash.

Enter credentials

Paste the REST Token into the credential field.

Enter the deployment endpoint

Paste the database’s Endpoint from the Upstash console into the REST URL field. Alter derives this credential’s allowed hosts from that exact host, so proxied calls can only ever reach the deployment. The allowlist cannot be widened or edited separately; rotate the credential with a new endpoint to retarget it.

Save

Click Save. You’ll receive a grant_id to use with the SDK.

Using in Code

response = await alter_app.request(
    HttpMethod.GET,
    "https://YOUR-DATABASE.upstash.io/get/mykey",
    grant_id="YOUR_GRANT_ID",
)

Notes

• Each database has its own Endpoint and token pair.

Policy-cataloged operations

Alter policy rules can target these attested operations and families for operation-level and parameter-aware controls.

Operation ID	Families	Method	Provider path
command/body	admin, delete, read, write	POST	/
command/path	admin, delete, read, write	GET	/{command}
command/path_post	admin, delete, read, write	POST	/{command}
pipeline	admin, delete, read, write	POST	/pipeline
multi-exec	admin, delete, read, write	POST	/multi-exec
publish	write	POST	/publish/{channel}/{message}
subscribe	read	POST	/subscribe/{channel}
monitor	read	POST	/monitor