---
title: "List Secrets"
method: GET
path: "/v1/secrets"
tags: ["v1", "protected", "secrets"]
---

# List Secrets

`GET /v1/secrets`

Every credential in the workspace the user would recognise as theirs.

Their own, plus the ones connections hold for them — the latter read-only.
Values are not included, here or anywhere.

## Response `200`

Successful Response

- SecretResponse[]
  - `created_at` string, nullable
  - `description` string, nullable
  - `id` string, uuid, required
  - `name` string, required — Unique within the workspace.
  - `owner` SecretOwner — The connection a managed secret belongs to.
    - `field` string, nullable — Which slot on the owner this fills — an env var, a header name.
    - `id` string, required — Its id, for deep-linking to it.
    - `name` string, nullable — Its display name, or null when the owner no longer exists.
    - `type` string, required — Kind of owner, e.g. mcp_instance or provider_config.
  - `updated_at` string, nullable
  - `used_by` SecretConsumer[]
    - `consumer_id` string, required — Id of the using entity.
    - `consumer_type` string, required — Kind of thing using the secret, e.g. provider_config.
    - `field` string, required — Which slot on that entity — a header name, an env var.

## Changes

- **2026-08-30** `99cf61829c55` — 1 info
  - added the optional property `items/owner` to the response with the `200` status
- **2026-08-30** `42240c74704e` — 1 info
  - endpoint added

[Change history](https://skmtc.dev/agentarea/apis/agentarea-api/changes/v1/secrets/get.md)

---

[API](https://skmtc.dev/agentarea/apis/agentarea-api.md) · [All operations](https://skmtc.dev/agentarea/apis/agentarea-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/agentarea/agentarea-api/revisions/99cf61829c55/schema)