# Northflank integration

> Cloud platform API for managing projects, services, jobs, databases and addons, secrets, domains, pipelines, volumes, templates, billing and logs.

- Authentication: apiKey

## Tools (369)

- **Abort backup**: Aborts the in progress backup.
- **Abort backup restore**: Aborts an in-progress backup restore.
- **Abort job build**: Aborts the given job build
- **Abort job run**: Aborts the given job run
- **Abort preview blueprint run**: Abort the given preview blueprint run
- **Abort release flow run**: Abort the given release flow run
- **Abort service build**: Aborts the given service build
- **Abort template run**: Abort the given template run.
- **Abort workflow run**: Abort the given workflow run
- **Activate encryption configuration**: Revalidates KMS access and atomically selects this configuration for new encryption. Other configurations are retained for decryption. Repeated activation revalidates the selected configuration. Requires customer-managed keys to be enabled.
- **Add backup destination**: Adds a new backup destination to this account.
- **Add member to team role**: Adds a user to a platform role in a team.
- **Add registry**: Adds a new set of container registry credentials to this account.
- **Add SSH identity**: Adds a new SSH identity to this account.
- **Add subdomain**: Adds a new subdomain to the domain.
- **Add subdomain path**: Adds a new path to the subdomain.
- **Add tag**: Add a new resource tag for this entity.
- **Assign service to subdomain**: Assigns a service port to the given subdomain
- **Assign subdomain path**: Assign a subdomain path to a port.
- **Attach volume**: Attach a volume
- **Backup addon**: Initiates a backup for the given addon
- **Backup volume**: Initiates a backup for a given volume
- **Check repository access**: Checks whether a git repository is publicly reachable or accessible via one of your linked version control accounts, before creating a resource that would clone it.
- **Clear the build cache of a service**: Clears the build cache of a given combined or build service.
- **Cordon cluster node**: Cordon a node on the cluster to prevent new pods from scheduling on it.
- **Create addon**: Creates a new addon
- **Create addon backup schedule**: Create a new backup schedule for an addon.
- **Create AI model**: Create an AI model
- **Create audit log sink**: Creates a new audit log sink.
- **Create build service**: Creates a new build service.
- **Create cluster**: Creates a new cluster.
- **Create combined service**: Creates a new combined service.
- **Create container snapshot**: Schedules a snapshot of a running deployment service pod. When no pod is provided, the service must have exactly one eligible pod. Repeated requests for an active pod return the existing snapshot.
- **Create deployment service**: Creates a new deployment service.
- **Create egress IP**: Creates a new egress IP
- **Create encryption configuration**: Creates an inactive configuration after validating KMS access. GCP cross-project creation defers that check and returns a generated service-account email: grant it KMS access before activation. Requires customer-managed keys to be enabled.
- **Create external addon**: Creates a new external addon (third-party cloud resource provisioned via OpenTofu)
- **Create global secret**: Creates a global secret with the specified payload
- **Create gradual rollout strategy**: Creates a new gradual rollout strategy.
- **Create harness**: Creates a new harness
- **Create integration**: Creates a new integration.
- **Create job**: Creates a new job (manual or cron based on settings.cron presence)
- **Create load balancer**: Creates a new load balancer
- **Create log sink**: Creates a new log sink.
- **Create network policy**: Creates a new network policy for this account.
- **Create new domain**: Registers a new domain
- **Create notification integration**: Create a new notification integration.
- **Create or update gradual rollout strategy**: Creates or updates a gradual rollout strategy.
- **Create or update project**: Creates or updates a project.
- **Create or update role**: Creates role or updates all user-editable fields on a platform role.
- **Create or update SSH identity**: Creates or updates SSH identity data.
- **Create preview blueprint**: Create a preview blueprint
- **Create project**: Creates a new project.
- **Create project secret**: Creates a project secret with the specified payload
- **Create team role**: Creates a new platform role for a team.
- **Create template**: Create a template
- **Create VCS link session**: Starts a CLI-driven flow to link a version control account. Returns a URL to open in a browser to authorize the link, and a session id to poll for completion.
- **Create volume**: Creates a volume with the specified payload
- **Create volume backup schedule**: Create a new snapshot backup schedule for a volume.
- **Create workflow**: Create a workflow
- **Create workload identity**: Creates a new workload identity on this account. For managed roles using automatic provider setup, installation of the cloud resources is triggered automatically unless `noInstall=true` is passed.
- **Deactivate encryption configuration**: Switches new encryption to Northflank-managed envelope encryption. Retains the old configuration for decryption and does not migrate existing data. Only the active configuration can be deactivated; repeated requests fail once it is inactive. Requires customer-managed keys to be enabled.
- **Delete addon**: Deletes the given addon.
- **Delete addon backup**: Deletes a given backup
- **Delete addon backup schedule**: Deletes a backup schedule for an addon.
- **Delete AI model**: Delete an AI model
- **Delete a key from an API token**: Removes a key from an API token.
- **Delete audit log sink**: Soft-deletes the audit log sink.
- **Delete backup destination**: Delete a backup destination.
- **Delete cluster**: Delete the given cluster. Fails if the cluster has associated projects.
- **Delete container snapshot**: Soft-deletes an unreferenced terminal container snapshot.
- **Delete domain**: Deletes a domain and each of its registered subdomains.
- **Delete egress IP**: Deletes the given egress IP.
- **Delete external addon**: Deletes an external addon and destroys the associated cloud resource
- **Delete global secret**: Delete a global secret
- **Delete gradual rollout strategy**: Deletes a gradual rollout strategy. Any services still using it are detached first, which redeploys them without the rollout. Because that redeploys services, this also requires service update permission. Fails if a rollout is in progress on any of those services.
- **Delete harness**: Deletes the given harness.
- **Delete integration**: Delete the given integration. Fails if the integration is associated with existing clusters.
- **Delete job**: Deletes the given job.
- **Delete load balancer**: Deletes the given load balancer.
- **Delete log sink**: Deletes a log sink.
- **Delete network policy**: Deletes a network policy and removes all associated CNPs from the cluster.
- **Delete notification integration**: Deletes a notification integration
- **Delete preview blueprint**: Delete a preview blueprint
- **Delete preview environment (projects, pipelines, preview-envs, previews)**: Delete a preview environment generated by a preview template.
- **Delete preview environment (projects, preview-blueprints, previews)**: Delete a preview environment generated by a preview blueprint.
- **Delete project**: Delete the given project. Fails if the project isn't empty.
- **Delete project secret**: Delete a project secret
- **Delete registry**: Deletes a set of registry credential data.
- **Delete service**: Deletes the given service.
- **Delete service per-replica volume group**: Fully deletes a removed per-replica statefulSet volume for the given service: all of its orphaned PVCs and the volume definition. The volume must first be removed from the service.
- **Delete service per-replica volume PVC**: Deletes one orphaned per-replica statefulSet volume PVC — a scaled-down ordinal, or a replica of a removed volume. Replicas still bound to a running instance are refused with 409.
- **Delete SSH identity**: Deletes an SSH identity.
- **Delete subdomain**: Removes a subdomain from a domain.
- **Delete subdomain path**: Delete a path.
- **Delete tag**: Delete a resource tag.
- **Delete team role**: Deletes a platform role from a team.
- **Delete template**: Delete a template
- **Delete volume**: Deletes this volume and its associated data.
- **Delete volume backup**: Delete the volume backup
- **Delete volume backup schedule**: Deletes a snapshot backup schedule for a volume.
- **Delete workload identity**: Deletes a workload identity.
- **Detach volume**: Detach a volume
- **Drain cluster node**: Drain a node by evicting all running pods.
- **Enable CDN on a subdomain**: Enables a CDN integration on the given subdomain
- **Enable Northflank-managed envelope encryption**: Opts into Northflank-managed envelope encryption for new writes without supplying a customer KMS configuration. Repeated requests are a no-op once enabled. Existing data is unchanged; DEKs created after opt-in can later be migrated to a customer KMS. If a customer configuration is active, deactivate
- **Finalise addon secret rotation**: Finalises an in-progress secret rotation for the given addon. The old credentials are permanently removed.
- **Generate VCS token**: Generate a token for a specific VCS link.
- **Get addon**: Gets information about the given addon
- **Get addon backup**: Gets details about a given backup.
- **Get addon backup logs**: Get logs for an addon backup
- **Get addon backup schedules**: Gets details about an addon's backup schedules
- **Get addon credentials**: Returns the credentials for connecting to the given addon.
- **Get addon logs**: Get logs for an addon
- **Get addon metrics**: Get metrics for an addon
- **Get addon restore logs**: Get logs for an addon restore
- **Get addon version details**: Gets details about the current addon version including available upgrades and upgrade history.
- **Get AI model**: Gets details about an AI model
- **Get audit log sink details**: Gets details about a given audit log sink. Secrets are redacted.
- **Get backup destination**: View a backup destination, including secrets.
- **Get backup download link**: Generates a temporary download link for downloading the given backup.
- **Get cluster**: Get information about the given cluster
- **Get container snapshot**: Gets a container snapshot.
- **Get credit balance**: Gets the credit available to the account, by origin.
- **Get current authentication info**: Returns the current API, session or workload token’s identity, permissions and expiry. Workload tokens also report their effective project restrictions. No additional permissions are required.
- **Get DNS ID**: Returns the partially random string used when generating host names for the authenticated account.
- **Get domain**: Gets details about domain
- **Get domain certificate**: Retrieve certificate data for a domain to verify its contents.
- **Get egress IP**: Gets information about the given egress IP
- **Get encryption configuration**: Gets safe settings and activation state for a customer-visible encryption configuration. Credentials and key-verification material are never returned.
- **Get encryption configuration usage**: Returns wrapped-DEK counts for customer-visible configurations. Old keys must remain accessible while referenced. This does not count legacy non-envelope ciphertext.
- **Get external addon**: Gets information about the given external addon
- **Get global secret**: Get a global secret including its contents
- **Get gradual rollout strategy**: Gets details of the given gradual rollout strategy.
- **Get harness**: Gets information about the given harness
- **Get harness logs**: Get logs for a harness
- **Get integration**: Get information about the given integration
- **Get invoice**: Gets details about a given invoice.
- **Get job**: Gets information about the given job
- **Get job branches**: Gets information about the branches of the given job.
- **Get job build**: Gets information about a build for the job
- **Get job build logs**: Get logs for a job build
- **Get job build metrics**: Get metrics for a job build
- **Get job logs**: Get logs for a job
- **Get job metrics**: Get metrics for a job
- **Get job pull requests**: Gets information about the pull-requests of the given job.
- **Get job runs**: Fetches run history for the given job
- **Get load balancer**: Gets information about the given load balancer
- **Get logs for a resource**: Get logs for any Northflank resource
- **Get log sink details**: Gets details about a given log sink.
- **Get network policy**: Get details of a network policy.
- **Get notification integration**: Get details about a notification integration.
- **Get OpenTofu job logs**: Get logs for an OpenTofu job
- **Get pipeline**: Get details about a pipeline
- **Get preview blueprint**: Gets details about a preview blueprint
- **Get preview blueprint run details**: Get information about the given preview blueprint run
- **Get preview template**: Get information about the given preview template.
- **Get preview template run**: Get information about the given preview template run.
- **Get project**: Get information about the given project.
- **Get project secret**: View a project secret including its contents
- **Get project secret addon link details**: Get details about a given addon link.
- **Get project secret details**: View a project secret with details about its linked addons
- **Get registry**: Views a set of registry credential data.
- **Get release flow**: Gets details about a release flow
- **Get release flow run details**: Get information about the given release flow run
- **Get run details**: Returns data about the given job run
- **Get service**: Gets information about the given service.
- **Get service branches**: Gets information about the branches of the given service.
- **Get service build**: Gets information about a build for the service
- **Get service build logs**: Get logs for a service build
- **Get service build metrics**: Get metrics for a service build
- **Get service logs**: Get logs for a service
- **Get service metrics**: Get metrics for a service
- **Get service per-replica volumes**: Lists the per-replica statefulSet volumes for the given service.
- **Get service pull requests**: Gets information about the pull-requests of the given service.
- **Get service rollout**: Gets the active gradual rollout of the given service, including the traffic configuration, the stable and canary deployments, and previous traffic configurations.
- **Get SSH identity**: Views SSH identity data including public keys.
- **Get subdomain**: Gets details about the given subdomain
- **Get subdomain path**: Get subdomain path details.
- **Get tag**: View details for a given resource tag.
- **Get team role**: Gets details about a specific platform role.
- **Get template**: Get information about the given template.
- **Get template run**: Get information about the given template run.
- **Get usage**: Gets usage details for a given billing hour.
- **Get VCS link session**: Gets the status of a version control link session, for polling until completion.
- **Get volume**: Retrieve a volume
- **Get volume backup details**: Get details for a specific volume backup
- **Get volume backups**: Get list of backups associated with a volume
- **Get volume backup schedules**: Gets details about a volume's backup schedules
- **Get workflow**: Gets details about a workflow
- **Get workflow run details**: Get information about the given workflow run
- **Get workload identity**: Retrieves a workload identity by ID.
- **Get workload identity provider status**: Checks whether the OIDC/workload identity provider resources have been installed on the given cloud provider integration account.
- **Health check**: Returns api service status
- **Import addon backup**: Imports a database from an external archive or existing live database.
- **Import domain certificate**: Import a certificate for the domain
- **Import OpenTofu state**: Moves state from another OpenTofu node in the same team to a node in this template. The state will be removed from the source node as such running the source node again may recreate resources.
- **Import subdomain certificate**: Import a certificate for a subdomain of a domain using individual certificates.
- **Initialize project**: Assigns a region or cluster to a pending project.
- **Install workload identity**: Triggers installation of the managed cloud resources (IAM role/policy) for a workload identity. For identities using an existing role, this validates and records the role details.
- **Install workload identity provider**: Triggers installation of the OIDC provider or workload identity pool resources on the given cloud provider integration account. This is required once per cloud account before creating managed workload identities.
- **Invite team member**: Invites a user to a team.
- **List addon backup restores**: Gets a list of restores for the given backup.
- **List addon backups**: Returns a list of backups for the given addon.
- **List addon containers**: Gets a list of containers for the given addon.
- **List addon restores**: Returns a list of restores for the given addon.
- **List addons**: Gets a list of addons belonging to the project
- **List addon types**: Gets information about the available addon types
- **List AI models**: Lists all AI models for a project
- **List API tokens**: Lists API tokens belonging to the authenticated org or team, newest first. Only active tokens are returned unless the `all` query parameter is set.
- **List audit log sinks**: Gets a list of audit log sinks defined on this entity.
- **List backup destinations**: Lists the backup destinations saved to this account. Does not display secrets.
- **List branches**: Gets a list of branches for the repo
- **List cluster nodes**: Get a list of nodes for the given cluster
- **List clusters**: Lists clusters for the authenticated user or team.
- **List container snapshots**: Gets container snapshots belonging to the team.
- **List destinations backups**: Lists the backups associated with a backup destinations.
- **List domains**: Lists available domains
- **List egress IPs**: Gets a list of egress IPs belonging to the team
- **List encryption configurations**: Lists customer-visible encryption configurations and the current encryption mode for the authenticated team or organization, including retained and legacy Vault configurations. Credentials and internal Northflank-managed configurations are never returned.
- **List external addons**: Gets a list of external addons belonging to the project
- **List global secrets**: Gets a list of global secrets
- **List gradual rollout strategies**: Lists the gradual rollout strategies belonging to the team, newest first.
- **List harnesses**: Gets a list of harnesses belonging to the project
- **List integrations**: Lists integrations for the authenticated user or team.
- **List invoices**: Lists finalized invoices.
- **List job builds**: Lists builds for the given job.
- **List job containers**: Gets a list of containers for the given job.
- **List jobs**: Gets a list of jobs belonging to the project
- **List load balancers**: Gets a list of load balancers belonging to the team
- **List log sinks**: Gets a list of log sinks added to this account.
- **List notification integrations**: Lists notification integrations for the authenticated user, team or org.
- **List pipelines**: Lists all pipelines for a project
- **List plans**: Lists available billing plans
- **List preview blueprint runs**: Lists runs of a previewBlueprint
- **List preview blueprints**: Lists all preview blueprints for a project
- **List preview environments (projects, pipelines, preview-envs, previews)**: Get a list of active preview environments for a template
- **List preview environments (projects, preview-blueprints, previews)**: Get a list of active previews for a preview blueprint.
- **List preview template runs**: Get a list of preview template runs
- **List projects**: Lists projects for the authenticated user or team.
- **List project secrets**: Gets a list of project secrets belonging to the project
- **List provider node types**: Lists supported cloud provider node types
- **List provider permissions**: Lists required cloud provider permissions for the selected integration features
- **List provider regions**: Lists supported cloud provider regions
- **List providers**: Lists supported cloud providers
- **List regions**: Lists available project regions
- **List registries**: Lists the container registry credentials saved to this account. Does not display secrets.
- **List release flow runs**: Lists runs of a release flow
- **List repositories**: Gets a list of repositories accessible to this account
- **List service builds**: Lists the builds for the service
- **List service containers**: Gets a list of containers for the given service.
- **List service deployments**: Lists the deployments of the given service, newest first. For services using a gradual rollout strategy each deployment also reports the release type it was created as.
- **List services**: Gets a list of services belonging to the project
- **List SSH identities**: Lists the SSH identities saved to this account. Does not display SSH public keys.
- **List subdomain paths**: List paths for a given subdomain.
- **List tags**: List the resource tags for this entity.
- **List team members**: Gets a list of members belonging to a team.
- **List team role members**: Gets a list of members assigned to a platform role in a team.
- **List team roles**: Gets a list of platform roles for a team.
- **List template runs**: Get a list of template runs
- **List templates**: Get a list of templates
- **List usage**: Lists hourly usage entries.
- **List VCS providers**: Lists linked version control providers
- **List volumes**: Gets a list of volumes belonging to the project
- **List workflow runs**: Lists runs of a workflow
- **List workflows**: Lists all workflows for a project
- **List workload identities**: Lists the workload identities saved to this account.
- **Patch addon**: Updates an addon
- **Patch audit log sink**: Partially updates an audit log sink. Fields not included in the payload retain their existing values.
- **Patch backup destination**: Updates a backup destination.
- **Patch build service**: Updates a build service.
- **Patch cluster**: Updates a cluster.
- **Patch combined service**: Updates a combined service.
- **Patch deployment service**: Updates a deployment service.
- **Patch egress IP**: Updates an egress IP
- **Patch global secret**: Updates a global secret with the specified payload
- **Patch harness**: Updates a harness
- **Patch integration**: Updates a integration.
- **Patch job**: Updates a job (manual or cron based on current type and settings.cron)
- **Patch load balancer**: Updates a load balancer
- **Patch project secret**: Updates a project secret with the specified payload
- **Pause addon**: Pause the given addon.
- **Pause audit log sink**: Pauses exports for the audit log sink.
- **Pause harness**: Pauses the given harness, scaling its deployment to zero.
- **Pause job**: Pause the given job.
- **Pause log sink**: Pauses a given log sink.
- **Pause preview environment**: Pause a preview environment generated by a preview blueprint.
- **Pause service**: Pause the given service.
- **Promote service rollout**: Promotes the canary deployment of the active gradual rollout to stable, routing all traffic to it. This is idempotent: promoting an already promoted rollout succeeds without changing anything.
- **Purge CDN cache for a subdomain**: Purges the CDN cache for the given subdomain
- **Put addon**: Creates or updates an addon
- **Put audit log sink**: Creates or fully replaces an audit log sink.
- **Put build service**: Creates or updates a build service.
- **Put cluster**: Creates or update a cluster.
- **Put combined service**: Creates or updates a combined service.
- **Put deployment service**: Creates or updates a deployment service.
- **Put egress IP**: Creates or updates an egress IP
- **Put global secret**: Creates or updates a global secret with the specified payload
- **Put harness**: Creates or updates a harness
- **Put integration**: Creates or updates a integration.
- **Put job**: Creates or updates a job (manual or cron based on settings.cron presence)
- **Put load balancer**: Creates or updates a load balancer
- **Put project secret**: Creates or updates a project secret with the specified payload
- **Put subdomain**: Updates subdomain to the domain.
- **Put tag**: Update or create a resource tag.
- **Remove CDN from a subdomain**: Removes the CDN integration from the given subdomain
- **Remove member from team role**: Removes a user from a platform role in a team.
- **Remove team member**: Removes a member from a team.
- **Reset addon**: Reset the given addon.
- **Reset preview environment expiry**: Reset the expiry of a preview environment generated by a preview blueprint.
- **Restart addon**: Restart the given addon.
- **Restart harness**: Restarts the given harness.
- **Restart service**: Restarts the given service.
- **Restore addon backup**: Restores the given addon to the given backup state.
- **Resume addon**: Resume the given addon if it is paused.
- **Resume audit log sink**: Resumes exports for a paused audit log sink.
- **Resume harness**: Resumes the given harness, restoring its deployment.
- **Resume job**: Resumes the given job. Optionally takes several arguments to override resumed settings.
- **Resume log sink**: Resumes a paused log sink.
- **Resume preview environment**: Resume a preview environment generated by a preview blueprint.
- **Resume service**: Resumes the given service. Optionally takes several arguments to override resumed settings.
- **Retain backup**: Flags a temporary backup generated by a backup schedule to be retained indefinitely rather than being deleted after the expiry date.
- **Roll back service rollout**: Ends the active gradual rollout and redeploys the service from a previous deployment. Use the list service deployments endpoint to find the deployment to roll back to.
- **Rotate addon secrets**: Starts a secret rotation for the given addon. New credentials are created with the same permissions; the old credentials remain valid until the rotation is finalised.
- **Rotate a key on an API token**: Creates a new key for an API token and sets all other keys to expire.
- **Run job**: Starts a new job run for the given job
- **Run preview blueprint**: Runs a given preview blueprint with given arguments. This endpoint can be used as part of a CI pipeline to automatically create a preview environment.
- **Run preview environment**: Run the given preview template.
- **Run release flow**: Runs a given release flow with given arguments. This endpoint can be used as part of a CI pipeline to automatically trigger a release process.
- **Run template**: Run a template
- **Run workflow**: Runs a given workflow with given arguments. This endpoint can be used as part of a CI pipeline to automatically trigger a release process.
- **Start job build**: Start a new build for the given job. Given a commit sha, it will build that commit.
- **Start service build**: Start a new build for the given combined or build service. Git build services require a branch or pull request. Bundle build services require a bundle URL and accept an optional branch and revision.
- **Trigger global secret dependents**: Runs the templates configured under the global secret’s dependents (when enabled).
- **Unassign subdomain**: Removes a subdomain from its assigned service
- **Unassign subdomain path**: Unassign a subdomain path to a port.
- **Uncordon cluster node**: Uncordon a node on the cluster if it was previously cordoned.
- **Update addon network settings**: Updates the network settings for the addon.
- **Update addon security rules**: Updates the security rules for the addon.
- **Update AI model**: Updates an AI model
- **Update domain**: Update domain options such as minimum TLS protocol version
- **Update encryption configuration options**: Replaces all DEK rotation and cache overrides. Omitted values revert to platform defaults; send options={} to reset all overrides. Values must satisfy platform bounds. Requires customer-managed keys to be enabled.
- **Update encryption configuration settings**: Replaces key coordinates and credentials after validating them. The provider cannot change. Previously activated configurations must still reach the same key; unused configurations may change keys. DEK options are preserved and must be updated through the options endpoint. Requires customer-managed
- **Update external addon**: Updates configuration for an external addon
- **Update geo routing configuration**: Updates the geo routing configuration for a geo-routed subdomain.
- **Update gradual rollout strategy**: Updates a gradual rollout strategy.
- **Update log sink**: Updates the settings for a log sink.
- **Update network policy**: Updates an existing network policy.
- **Update notification integration**: Updates a notification integration
- **Update preview blueprint**: Updates a preview blueprint
- **Update preview template**: Update a given preview template.
- **Update project**: Updates a project.
- **Update project secret**: Update a project secret
- **Update project secret addon link**: Link an addon to a project secret or edit the settings of the linked addon.
- **Update registry**: Updates a set of registry credential data.
- **Update release flow**: Updates a release flow
- **Update service rollout configuration**: Updates the traffic split of the active gradual rollout. Only percentage based rollouts can be reconfigured. Setting the canary to 100% promotes the rollout.
- **Update SSH identity**: Updates SSH identity data.
- **Update subdomain path**: Update a subdomain path.
- **Update tag**: Patch a resource tag.
- **Update team role**: Updates a platform role for a team.
- **Update template**: Update a template
- **Update volume**: Update volume mounts and storage size
- **Update workflow**: Updates a workflow
- **Update workload identity**: Updates a workload identity. For managed roles using automatic provider setup, installation of the cloud resources is triggered automatically unless `noInstall=true` is passed.
- **Upgrade addon version**: Upgrades the addon to a new version.
- **Verify domain**: Attempts to verify the domain
- **Verify encryption configuration**: Checks stored KMS settings without changing the configuration. A completed check returns ok=false on KMS failure. Legacy Vault configurations return ok=true without a KMS check.
- **Verify subdomain**: Gets details about the given subdomain

Connect Northflank in General Input: https://www.generalinput.com/apps/northflank