---
title: "List Secrets"
method: GET
path: "/v1/secrets"
---

# List Secrets

`GET /v1/secrets`

## Request

- Base URL: `https://api.browserbase.com`
- URL: `https://api.browserbase.com/v1/secrets`
- Auth: API key in header `X-BB-API-Key`

List project secrets. Supports filtering by creation time.

## Query parameters

- `startAt` string, date-time
- `endAt` string, date-time
- `limit` integer
- `cursor` string

## Response `200`

The page of matching secrets.

- object: A page of secrets.
  - `data` Secret[], required: The page of matching secrets.
    - `id` string, required: Unique identifier of the secret.
    - `secretKey` string, required: The name the secret value is stored under.
    - `createdAt` string, date-time: Time at which the secret was created, in UTC, using RFC 3339 format, e.g. 2026-01-19T00:00:00.000Z.
    - `updatedAt` string, date-time: Time at which the secret's value was last set, in UTC, using RFC 3339 format, e.g. 2026-01-20T00:00:00.000Z.
  - `limit` integer, required: The maximum number of results returned in this page.
  - `nextCursor` string, nullable, required: Cursor for the next page. Pass it back as `cursor` on the next request to continue paging. null when there are no more results.

## Other responses

- `400`: Invalid query parameters or cursor, or startAt is after endAt.

## Changes

- **2026-10-30** `3661c37195a7`: 2 info
  - added the optional property `data/items/createdAt` to the response with the `200` status
  - added the optional property `data/items/updatedAt` to the response with the `200` status
- **2026-10-16** `266d5199a560`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/browserbase/apis/browserbase-api/changes/v1/secrets/get.md)

---

[API](https://skmtc.dev/browserbase/apis/browserbase-api.md) - [All operations](https://skmtc.dev/browserbase/apis/browserbase-api/llms.txt) - [OpenAPI document](https://skmtc.dev/browserbase/apis/browserbase-api/revisions/106c5f72c742?raw)