Improvement to objects lifecycle with Devolutions Server REST APIs
1 vote
Hi,
I send this feature request as part of our ongoing evaluation of a potential migration to Devolutions Server. Being able to manage the full lifecycle of our vault entries programmatically through the REST API, rather than the PowerShell module, is an important aspect of this evaluation.
I would like to request support for creating and fully managing connection/session objects through the REST API, in addition to Username/Password credentials.
Based on our recent tests, we can already do the following through REST API v1:
However, creating the actual connection/session entries is not possible through the public REST API.
POST /api/v1/vault/{vaultId}/entry returns HTTP 422 for these entry types:
RDPConfigured and WebBrowser appear in GET /api/v1/entry/definition, so we expected them to be creatable via REST. AWS and DataReport do not appear in that definition at all.
Support confirmed that REST API v1 is currently designed around Username/Password credential management, and that session creation requires the PowerShell module. Because of this, provisioning new sessions still requires PowerShell even when folders and credentials can already be created via REST.
A related gap is linking: we cannot set CredentialConnectionID / CredentialConnectionSavedPath through REST when creating or updating a Web or RDP entry. Linking a connection to an existing Credential object currently requires PowerShell.
Ideally, REST API v1 would support:
This would allow us to onboard and maintain new objects entirely through REST, instead of mixing REST for folders/credentials with PowerShell import for sessions.
The switch to REST API is especially important for our use case, as we need these operations to be automated consistently through an external integration. REST would make these flows faster and more consistent than invoking the PowerShell module for every new object.
I believe this would be a valuable addition, particularly for environments where vault entry lifecycle management needs to be integrated with external automation and API-based workflows.
Thanks!
Hello,
Creating RDPConfigured and WebBrowser entries through POST /api/v1/vault/{vaultId}/entry is supported since DVLS 2025.3, along with PUT and PATCH. If you are getting a 422 on those two types, please confirm your server version, and make sure you do not send a subType for them (it must be omitted). PATCH for metadata (name, description, path, tags) also works.
The remaining gaps you listed are real, and we have opened an internal improvement ticket to address them. We will update this thread when there is progress.
Best regards,
Sébastien Aubin
Product manager - Password Management