---
title: "List secrets"
method: GET
path: "/websites/{websiteId}/secrets"
tags: ["Secrets"]
---

# List secrets

`GET /websites/{websiteId}/secrets`

## Request

- Base URL: `https://api.cactal.ai/v1`
- URL: `https://api.cactal.ai/v1/websites/{websiteId}/secrets`
- Auth: HTTP bearer

Returns the names of a website's secrets with when each was created and last changed. Values are write-only and never returned. Server functions read secrets from `env` by name.

## Path parameters

- `websiteId` string, required

## Response `200`

Secret names and timestamps.

- object
  - `items` object[], required
    - `name` string, required
    - `createdAt` string, required
    - `updatedAt` string, required
  - `manageUrl` string, required: The website's settings, where a person adds or replaces secret values.

## Other responses

- `400`: Validation failed. The response `message` names the first invalid field.
- `401`: Missing, invalid, expired, or revoked API key.
- `403`: The authenticated principal lacks the required capability.
- `404`: The resource does not exist or is outside the principal’s access scope.
- `429`: Rate limit exceeded. Retry after the number of seconds in the `Retry-After` header.

---

[API](https://skmtc.dev/cactal/apis/cactal-api.md) · [All operations](https://skmtc.dev/cactal/apis/cactal-api/llms.txt) · [OpenAPI document](https://skmtc.dev/cactal/apis/cactal-api/revisions/9cd0fb5eacdd?raw)