Neo4j Aura

Overview

Use Neo4j Aura credentials to make authenticated API calls through Alter Vault without exposing API keys in code.

Property	Value
Provider ID	neo4j
Category	Database
Credential Type	Base64 Credentials

Step 1: Get Credentials

Log in to the Aura Console

Log in to the Neo4j Aura Console.

Note the instance credentials

Create (or open) an instance and note the generated username and password — the password is only shown at creation.

Encode the credentials

Base64-encode the credentials: echo -n 'neo4j:password' | base64 and paste the result into the credential field.

Warning

Never share credentials publicly. Store them securely and only enter them in the Alter Vault Developer Portal.

Step 2: Add to Alter Vault

Open the Developer Portal

Go to portal.alterauth.com and navigate to the application.

Add Neo4j Aura

Go to Managed Secrets > Add Provider > Neo4j Aura.

Enter credentials

Paste your Base64 Credentials into the credential field.

Save

Click Save. You’ll receive a grant_id to use with the SDK.

Using in Code

response = await alter_app.request(
    HttpMethod.POST,
    "https://YOUR-INSTANCE.databases.neo4j.io/db/neo4j/query/v2",
    grant_id="YOUR_GRANT_ID",
    json={"statement": "MATCH (p:Person)-[:KNOWS]->(f) RETURN p.name, f.name LIMIT 5"},
)

Notes

• The Query API accepts Cypher in a JSON payload and returns structured node/relationship arrays.

Policy-cataloged operations

Alter policy rules can target these attested operations and families for operation-level and parameter-aware controls.

Operation ID	Families	Method	Provider path
query	admin, delete, read, write	POST	/db/{databaseName}/query/v2
queryInTransaction	admin, delete, read, write	POST	/db/{databaseName}/query/v2/tx/{transactionId}
beginTransaction	write	POST	/db/{databaseName}/query/v2/tx
commitTransaction	write	POST	/db/{databaseName}/query/v2/tx/{transactionId}/commit
rollbackTransaction	write	DELETE	/db/{databaseName}/query/v2/tx/{transactionId}