---
title: "What your agents have asked you for"
method: GET
path: "/v1/secret-requests"
tags: ["Secrets"]
---

# What your agents have asked you for

`GET /v1/secret-requests`

## Request

- Base URL: `https://api.1claw.co`
- URL: `https://api.1claw.co/v1/secret-requests`
- Auth: HTTP bearer

User-authenticated. Open requests for the caller's org, newest first, excluding expired ones. Agents cannot call this — they read their own request by id, so one agent can never enumerate which credentials an org holds.

## Response `200`

Open requests

- object
  - `requests` SecretRequest[], required
    - `id` string, uuid, required
    - `agent_id` string, uuid, nullable
    - `agent_name` string, nullable
    - `label` string, required: Written by the agent. Untrusted text — render it as text, never as markup.
    - `purpose` string, required
    - `suggested_path` string, nullable
    - `status` 'pending' | 'fulfilled' | 'declined' | 'expired', required
    - `stored_path` string, nullable: Set on fulfilment. Where the secret went, not what it is.
    - `vault_id` string, uuid, nullable
    - `expires_at` string, date-time, required
    - `created_at` string, date-time, required

## Other responses

- `403`: Called by an agent

---

[API](https://skmtc.dev/1claw/apis/1claw-api.md) · [All operations](https://skmtc.dev/1claw/apis/1claw-api/llms.txt) · [OpenAPI document](https://skmtc.dev/1claw/apis/1claw-api/revisions/5fa0918f3b41?raw)