> For clean Markdown of any page, append .md to the page URL.
> For a complete documentation index, see https://docs.usepassport.ai/llms.txt.
> For AI client integration (Claude Code, Cursor, etc.), connect to the MCP server at https://docs.usepassport.ai/_mcp/server.

# Add resources to a namespace in Passport

Resources are the API endpoints that Passport manages access to. Adding resources to a namespace makes them visible to Passport Members, who can then request access and call them using secret references instead of real credentials.

To add a resource, choose a source, review the endpoints Passport detected, create a resource group, and map secrets to secret references. You can import existing API specifications or proxy activity, paste a curl request, or enter endpoints manually.

> **Info**
>
> Before adding resources, make sure the [Passport Proxy is set up](/passport/set-up/set-up-proxy/). The proxy must be registered before you can [map secrets](#step-4-map-secrets).

## Step 1: Choose a source

From the namespace **Resources** tab, click **Add resources** and select how you want to bring endpoints into Passport. You can import a file, paste a curl request, or enter an endpoint manually.

### Import a file

Drag and drop a proxy activity export, API specification, or collection export. Passport detects the format and prepares its endpoints for review.

Passport supports the following file formats:

* **Proxy activity export (OTEL)** — Proxy activity that's grouped into the endpoints it discovered. Accepts `.json`, `.jsonl`, `.ndjson`, and `.log` files.
* **API specification** — An OpenAPI or compatible specification. Accepts `.json`, `.yaml`, and `.yml` files.
* **Postman collection** — Requests from the collection, prepared as endpoints for review. Accepts `.json` files.

### Paste a curl request

Passport detects the host, method, path, and credential-bearing headers from the request. Enter the curl request and click **Import cURL**.

> **Info**
>
> You can also click **Use sample cURL** to use a sample request for testing.

### Enter an endpoint manually

Click **Enter an endpoint manually** to define the endpoint yourself.

## Step 2: Add/review endpoints

Review the endpoints Passport detected and select the ones you want to add.

* **File or curl import** — Select the endpoints to include, then click **Continue to group details**.
* **Manual entry** — Fill in the following fields, then click **Add manual endpoint**:
  * **Resources host** — The hostname of the API.
  * **HTTP method** — Select `GET`, `POST`, `PUT`, `PATCH`, `DELETE`, or `* (any method)`. Use `* (any method)` to match every method on the host and path with a single endpoint.
  * **Path or path pattern** — Enter an exact path like `/orders`, or a pattern. Use `:name` or `{name}` to match one path segment (`/users/:id` or `/users/{id}`), and `*` to match one segment (`/v1/*/orders`) or, at the end of a path, everything below it (`/v1/*`). Use `/*` to match every path on the host. Each `:name`, `{name}`, or `*` must be a complete path segment.
  * **Auth header label** (optional) — The authentication header label.

## Step 3: Create a resource group

Enter a name and description for the resource group, then click **Next**. Resource groups organize related endpoints within a namespace.

## Step 4: Map secrets

Map secrets for each endpoint by selecting an existing secret reference or creating a new one. You can also skip this step and map secrets later from the namespace's **Vault** tab.

To create a secret reference, do the following:

1. Click **Create vault reference**.
2. Enter a reference pointer.
3. Select a vault type: **Hashicorp** (HashiCorp Vault), **AWS** (AWS Secrets Manager), or **GCP** (Google Cloud Secret Manager).
4. Enter the vault key.
5. Click **Save vault reference**.

## Step 5: Create resources

Click **Create resources** to finish. The resource group appears in the namespace **Resources** tab.

## Manage secret references

The **Vault** tab shows all secret references, which namespaces they're used in, and the reference pointer.

To create a secret reference, do the following:

1. Select the namespace and click the **Vault** tab.
2. Click **Create vault reference**.
3. Enter a reference pointer.
4. Select a vault type: **Hashicorp** (HashiCorp Vault), **AWS** (AWS Secrets Manager), or **GCP** (Google Cloud Secret Manager).
5. Enter the vault key.
6. Click **Create reference**.

## Next steps

With resources added, [invite your team members](/passport/administer/manage-your-team/#manage-team-members) so they can request access. Once members are added, you can [manage their API access requests](/passport/set-up/manage-api-access/).