List secrets

GET

/secrets

const url = 'https://example.com/api/v1/secrets';
const options = {method: 'GET'};

try {
  const response = await fetch(url, options);
  const data = await response.json();
  console.log(data);
} catch (error) {
  console.error(error);
}

curl --request GET \
  --url https://example.com/api/v1/secrets

Lists the secrets the caller may see, with masked fields, filtered to the read scope; admin-sensitive secrets appear only to the admin tier. Gated by secret:read, which the viewer floor does not carry (secret is a sensitive resource).

Responses

200

application/json

object

$schema

A URL to the JSON Schema for this object.

string format: uri

secrets

required

Array<object> | null

object

$schema

A URL to the JSON Schema for this object.

string format: uri

admin_sensitive

required

When true, only the admin tier may see or reveal this secret, regardless of placement

boolean

fields

required

Array<object> | null

object

name

required

string

secret

required

Whether the field is encrypted at rest and masked here

boolean

value

required

string

required

string

label

The friendly string an operator reads; absent when unset, and a surface with none renders the name verbatim

string

name

required

string

owner_id

The owning entity’s id, the canonical handle; absent for a global owner

string

owner_kind

required

string

owner_name

string

secret_type

required

The secret_type name

string

secret_type_id

required

The secret_type’s uuid, the stable form of secret_type

string

Example

{
  "$schema": "/api/v1/schemas/ListSecretsOutputBody.json",
  "secrets": [
    {
      "$schema": "/api/v1/schemas/SecretBody.json"
    }
  ]
}

default

Error

application/problem+json

object

$schema

A URL to the JSON Schema for this object.

string format: uri

detail

A human-readable explanation specific to this occurrence of the problem.

string

errors

Optional list of individual error details

Array<object> | null

object

location

Where the error occurred, e.g. ‘body.items[3].tags’ or ‘path.thing-id’

string

message

Error message text

string

value

The value at the given location

instance

A URI reference that identifies the specific occurrence of the problem.

string format: uri

status

HTTP status code

integer format: int64

title

A short, human-readable summary of the problem type. This value should not change between occurrences of the error.

string

type

A URI reference to human-readable documentation for the error.

string format: uri

default: about:blank

Example

{
  "$schema": "/api/v1/schemas/ErrorModel.json",
  "detail": "Property foo is required but is missing.",
  "instance": "https://example.com/error-log/abc123",
  "status": 400,
  "title": "Bad Request",
  "type": "about:blank"
}