---
title: "POST /usc-get"
method: POST
path: "/usc-get"
tags: ["Universal Secrets Connector"]
---

# POST /usc-get

`POST /usc-get`

## Request

- Base URL: `https://api.akeyless.io`
- URL: `https://api.akeyless.io/usc-get`
- Auth: none declared

## Request body

- UscGet: uscGet is a command that gets the value and internal details of a secret from a Universal Secrets Connector
  - `aws-account-id` string: The AWS account ID that contains the secret. Required when the connector spans multiple account IDs.
  - `gcp-project-id` string: The GCP project the secret resides in (GCP only). Used when getting a secret by name in a connector that spans multiple projects or uses folder/organization scope.
  - `json` boolean: Set output format to JSON
  - `namespace` string: The namespace (relevant for Hashi vault target)
  - `object-type` string
  - `region` string: The AWS region that contains the secret (AWS only). If empty, uses the target region.
  - `secret-id` string, required: The secret id (or name, for AWS, Azure, K8s or Hashi vault targets) to get from the Universal Secrets Connector
  - `selected-repositories` string: GitHub selected repositories. For repository scope: repo name. For repository-environment scope: repo/env (format: repo-name/env-name). Required when multiple repos/envs configured.
  - `token` string: Authentication token (see `/auth` and `/configure`)
  - `uid-token` string: The universal identity token, Required only for universal_identity authentication
  - `usc-name` string, required: Name of the Universal Secrets Connector item
  - `version-id` string: The version id (if not specified, will retrieve the last version)

## Response `200`

uscGetResponse wraps response body.

- UscGetSecretOutput
  - `activation_date` string, date-time
  - `binary_value` boolean
  - `encryption_key` string
  - `expiration` string, date-time
  - `id` string
  - `metadata` unknown
  - `name` string
  - `value` string
  - `version_id` string
  - `version_ids` string[]
  - `warnings` string[]

## Other responses

- `default`: errorResponse wraps any error to return it as a JSON object with one "error" field.

---

[API](https://skmtc.dev/akeyless/apis/infrastructure-connectivity.md) - [All operations](https://skmtc.dev/akeyless/apis/infrastructure-connectivity/llms.txt) - [OpenAPI document](https://skmtc.dev/akeyless/apis/infrastructure-connectivity/revisions/62dc62fea89d?raw)