Secrets

Retrieve a decrypted secret

get/v1/vaults/{vault_id}/secrets/{path}

Request

  • Base URL: https://api.1claw.co
  • URL: https://api.1claw.co/v1/vaults/{vault_id}/secrets/{path}
  • Auth: HTTP bearer

Path parameters

vault_idstring uuid required
pathstring required

Secret path (e.g. "db/credentials")

Headers

x-client-sharestring

Base64-encoded client key share for MPC 2-of-2 vaults. Required when the vault uses 2-of-2 MPC custody.

Response

Decrypted secret value

idstring uuid required
pathstring required
typestring required
valuestring required
versioninteger required
metadataobject
created_bystring
created_atstring date-time required
expires_atstring date-time
cmek_encryptedboolean

Whether this secret value is CMEK-encrypted (requires client-side decryption)

Changes

No recorded changes to this operation across all 2 revisions of this API.