---
title: "List organization secrets"
method: GET
path: "/api/v1/identity/organizations/{organization_id}/secrets"
tags: ["identity"]
---

# List organization secrets

`GET /api/v1/identity/organizations/{organization_id}/secrets`

## Request

- Base URL: `https://composal.com` (the document declares no server; this is the origin it was published from)
- URL: `https://composal.com/api/v1/identity/organizations/{organization_id}/secrets`
- Auth: HTTP bearer

## Path parameters

- `organization_id` string, required

## Response `200`

Organization secrets page (organization summary plus secret metadata)

- object
  - `organization` OrganizationSummary, required
    - `id` string, required
    - `slug` string, required
    - `name` string, required
    - `timezone` string, required: Default IANA timezone for organization-local schedules such as nightly dreaming.
    - `logo_url` string, nullable, required
    - `role` string, nullable, required
    - `personal` boolean, required
    - `member_count` integer, required
    - `pending_invitation_count` integer, required
    - `repository_count` integer, required
    - `source_ui_enabled` boolean: Organization-scoped Source workspace rollout; missing values mean disabled.
    - `source_control_providers` string[]: Connected source control providers for this organization. Missing values mean no providers are known.
    - `activated_products` string[], required: Products this organization has activated (PRD 144). Activation is what makes a product's surfaces visible; it is neither permission nor entitlement.
    - `can_activate_products` boolean, required: Whether the current user may activate a product for this organization: the organization-admin rule the activation endpoint enforces.
    - `sandbox_region` 'us-was-1' | 'us-pdx-1' | 'eu-lon-1' | 'eu-fra-1' | 'auto', required
    - `github_prs_authored_by_change_author` boolean, required
    - `created_at` string, date-time, required
    - `updated_at` string, date-time, required
    - `created_at_label` string, nullable, required
    - `updated_at_label` string, nullable, required
  - `secrets` object[], required
    - `id` string, required
    - `organization_id` string, nullable, required
    - `hosted_app_id` string, nullable, required
    - `app_environment_id` string, nullable, required
    - `app_service_id` string, nullable, required
    - `owner_service_account_id` string, nullable, required
    - `slug` string, required
    - `name` string, required
    - `env_key` string, required
    - `scope_kind` string, required
    - `status` string, required
    - `description` string, nullable, required
    - `rotation_policy` string, nullable, required
    - `expose_to_build` boolean, required
    - `expose_to_ci` boolean, required
    - `latest_version_number` integer, nullable, required
    - `current_version` object, nullable, required
      - `id` string, required
      - `secret_id` string, required
      - `version_number` integer, required
      - `value` string, nullable, required
      - `has_value` boolean, required
      - `value_kind` string, required
      - `value_digest` string, nullable, required
      - `status` string, required
      - `created_by_user_id` string, nullable, required
      - `expires_at` string, date-time, nullable, required
      - `rotated_at` string, date-time, nullable, required
      - `created_at` string, date-time, required
      - `updated_at` string, date-time, required
    - `created_by` object, nullable, required
      - `id` string, required
      - `name` string, nullable, required
      - `email` string, nullable, required
      - `picture_url` string, nullable, required
    - `last_accessed_by` object, nullable, required
      - `id` string, required
      - `name` string, nullable, required
      - `email` string, nullable, required
      - `picture_url` string, nullable, required
    - `created_at` string, date-time, required
    - `updated_at` string, date-time, required
    - `last_accessed_at` string, date-time, nullable, required
    - `created_at_label` string, nullable, required
    - `updated_at_label` string, nullable, required
    - `last_accessed_at_label` string, nullable, required

## Other responses

- `401`: Unauthorized
- `403`: Forbidden
- `404`: Not found
- `422`: Unprocessable entity
- `502`: Bad gateway

---

[API](https://skmtc.dev/composal/apis/vex-api.md) - [All operations](https://skmtc.dev/composal/apis/vex-api/llms.txt) - [OpenAPI document](https://skmtc.dev/composal/apis/vex-api/revisions/19698ba051dc?raw)