Subscribe via SSE
The vault event stream is a standard SSE endpoint. Any HTTP client that supports Server-Sent Events can subscribe: browsers, Node.js, Python, curl, or AI agents.Authentication
The SSE endpoint requires a Bearer token — either your API key or a vault access token:From a browser (JavaScript)
From Node.js
SSE event format
Each event follows the standard SSE format:Replay missed events
The SSE endpoint supportsLast-Event-ID for replaying missed events from the last known position:
Stream termination
The stream closes automatically when:- The vault is sealed (
vault.sealedevent fires, then connection closes) - The vault expires
- The access token expires
vault.sealed event.
Related
- Emit events — server-side event emission
- Access control — issue vault access tokens
- Event reference — event payload schemas

