🏦 Bank Account
A bank account: the bank, the account and routing numbers, and the online banking sign-in.
- The editor checks the account number (4 to 17 digits) and the routing number (9 digits) before it saves.
Type id: type-bank-account. Agents and sneakers-put name the type by this id; sneakers_list_secret_types lists it.
🧾 Fields
| Field | Key | Kind | Required | Secret | Notes |
|---|---|---|---|---|---|
| Description | description | Multi-line text | No | No | |
| Bank name | bank | Text | No | No | |
| Account number | accountNumber | Secret value (never generated) | Yes | Super-sensitive | must match ^\d{4,17}$; at most 17 characters |
| Routing number | routingNumber | Secret value (never generated) | No | Super-sensitive | must match ^\d{9}$; at most 9 characters |
| Online username | onlineUsername | Text | No | No | |
| Online password | onlinePassword | Secret value (never generated) | No | Super-sensitive | |
| Notes | notes | Multi-line text | No | No |
🔒 What's secret
Account number, Routing number, Online password are masked until someone who can read the secret reveals or copies them, and every reveal and copy is written to the audit trail. Everything else is plain metadata that anyone who can see the folder can see.
Account number, Routing number, Online password are super-sensitive: the reveal shows a partial mask first and takes a second, deliberate reveal for the whole value. Service accounts and personal tokens can't read them while the Allow API access to sensitive secrets setting is off, which is the default (security settings).
🔁 Heartbeat, rotation and check-out
- Heartbeat: no.
- Rotation: no.
- Check-out: no.
🎯 Targets
A Bank Account takes no target.