---
title: "Retrieve a specific version of a secret"
method: GET
path: "/v1/vaults/{vault_id}/secret-version/{path}/{version}"
tags: ["Secrets"]
---

# Retrieve a specific version of a secret

`GET /v1/vaults/{vault_id}/secret-version/{path}/{version}`

## Request

- Base URL: `https://api.1claw.co`
- URL: `https://api.1claw.co/v1/vaults/{vault_id}/secret-version/{path}/{version}`
- Auth: HTTP bearer

## Path parameters

- `vault_id` string, uuid, required
- `path` string, required
- `version` integer, required

## Response `200`

Decrypted secret value at the specified version

- SecretResponse
  - `id` string, uuid, required
  - `path` string, required
  - `type` string, required
  - `value` string, required
  - `version` integer, required
  - `metadata` object
  - `created_by` string
  - `created_at` string, date-time, required
  - `expires_at` string, date-time
  - `cmek_encrypted` boolean: Whether this secret value is CMEK-encrypted (requires client-side decryption)

## Other responses

- `404`: Resource not found
- `410`: Version has been disabled or expired

---

[API](https://skmtc.dev/1claw/apis/1claw-api.md) · [All operations](https://skmtc.dev/1claw/apis/1claw-api/llms.txt) · [OpenAPI document](https://skmtc.dev/1claw/apis/1claw-api/revisions/ae109b496830?raw)