---
title: "Retrieve a decrypted secret"
method: GET
path: "/v1/vaults/{vault_id}/secrets/{path}"
tags: ["Secrets"]
---

# Retrieve a decrypted secret

`GET /v1/vaults/{vault_id}/secrets/{path}`

## Request

- Base URL: `https://api.1claw.co`
- URL: `https://api.1claw.co/v1/vaults/{vault_id}/secrets/{path}`
- Auth: HTTP bearer

## Path parameters

- `vault_id` string, uuid, required
- `path` string, required

## Headers

- `x-client-share` string

## Response `200`

Decrypted secret value

- SecretResponse
  - `id` string, uuid, required
  - `path` string, required
  - `type` string, required
  - `value` string, required
  - `version` integer, required
  - `metadata` object
  - `created_by` string
  - `created_at` string, date-time, required
  - `expires_at` string, date-time
  - `cmek_encrypted` boolean: Whether this secret value is CMEK-encrypted (requires client-side decryption)

## Other responses

- `402`: x402 payment required
- `404`: Resource not found

---

[API](https://skmtc.dev/1claw/apis/1claw-api.md) · [All operations](https://skmtc.dev/1claw/apis/1claw-api/llms.txt) · [OpenAPI document](https://skmtc.dev/1claw/apis/1claw-api/revisions/5fa0918f3b41?raw)