---
title: "Search Secrets Shared With Me"
method: POST
path: "/api/v1/search/secrets/shared_with_me"
tags: ["Secrets"]
---

# Search Secrets Shared With Me

`POST /api/v1/search/secrets/shared_with_me`

## Request

- Base URL: `https://example.conductor.one`
- URL: `https://example.conductor.one/api/v1/search/secrets/shared_with_me`
- Auth: HTTP bearer and OAuth 2
  - Client credentials
  - Token URL: `/auth/v1/token`

SearchSecretsSharedWithMe returns secrets shared with the current user.
 Automatically scoped to current user - no user_id filter parameter.
 INTERNAL secrets only: EXTERNAL secrets are addressed by email and are never
 viewable through an authenticated C1 session, so returning them here would
 surface rows that GetContent then denies.

## Request body

- C1ApiSecretsV1PaperSecretServiceSearchSecretsSharedWithMeRequest: SearchSecretsSharedWithMe request - for end users viewing secrets others shared with them. Automatically scoped to current user.
  - `includeOwn` boolean: Include secrets the caller created and also shared with themselves. Off by default so this list stays disjoint from SearchMySecrets.
  - `pageSize` integer: The pageSize field.
  - `pageToken` string: The pageToken field.
  - `query` string: Fuzzy search by display name
  - `secretType` 'SECRET_TYPE_UNSPECIFIED' | 'SECRET_TYPE_TEXT' | 'SECRET_TYPE_FILE': Filter by secret type. Unspecified returns all secret types.
  - `sharingMode` 'PAPER_VAULT_SHARING_MODE_UNSPECIFIED' | 'PAPER_VAULT_SHARING_MODE_INTERNAL' | 'PAPER_VAULT_SHARING_MODE_EXTERNAL': Filter by sharing mode. Unspecified returns internal secrets; external returns none.
  - `statuses` string[], nullable: Filter by status. Empty returns all statuses.

## Response `200`

Search response for user's own secrets

- C1ApiSecretsV1PaperSecretServiceSearchResponse: Search response for user's own secrets
  - `list` C1ApiSecretsV1PaperSecret[], nullable: The list field.
    - `ageSuite` 'AGE_SUITE_UNSPECIFIED' | 'AGE_SUITE_X25519' | 'AGE_SUITE_MLKEM768X25519': Exact Age suite used by the stored ciphertext.
    - `allowedEmails` string[], nullable: The allowedEmails field.
    - `allowedUserIds` string[], nullable: Access control
    - `contentDeleted` boolean: The contentDeleted field.
    - `contentExpiresAt` string, date-time, nullable
    - `contentReady` boolean: Whether content has been set (text uploaded or file uploaded)
    - `contentType` string: The contentType field.
    - `createdAt` string, date-time, nullable
    - `creatorUserId` string: Creator
    - `currentViews` integer: The currentViews field.
    - `deletedAt` string, date-time, nullable
    - `displayName` string: From Vault
    - `fileSize` string, int64: File metadata
    - `filename` string: For FILE secrets: original filename (sanitized)
    - `inputFormat` 'SECRET_INPUT_FORMAT_UNSPECIFIED' | 'SECRET_INPUT_FORMAT_PLAINTEXT' | 'SECRET_INPUT_FORMAT_JSON' | 'SECRET_INPUT_FORMAT_YAML' | 'SECRET_INPUT_FORMAT_KEY_VALUE': The inputFormat field.
    - `maxViews` integer: View tracking
    - `secretType` 'SECRET_TYPE_UNSPECIFIED' | 'SECRET_TYPE_TEXT' | 'SECRET_TYPE_FILE': The secretType field.
    - `shareCode` string: Human-friendly share code (XXXX-XXXX-XXXX) for shareable URLs
    - `shareUrl` string: URL to share with recipients (populated when content_ready is true)
    - `sharingMode` 'PAPER_VAULT_SHARING_MODE_UNSPECIFIED' | 'PAPER_VAULT_SHARING_MODE_INTERNAL' | 'PAPER_VAULT_SHARING_MODE_EXTERNAL': From PaperVault
    - `status` 'SECRET_STATUS_UNSPECIFIED' | 'SECRET_STATUS_ACTIVE' | 'SECRET_STATUS_EXPIRED' | 'SECRET_STATUS_BURNED' | 'SECRET_STATUS_REVOKED' | 'SECRET_STATUS_DATA_DELETED': Computed status
    - `updatedAt` string, date-time, nullable
    - `vaultId` string: Vault.id - primary identifier for the secret
  - `nextPageToken` string: The nextPageToken field.

## Changes

- **2026-10-06** `918a4e749f56`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/conductorone/apis/c1-api/changes/api/v1/search/secrets/shared_with_me/post.md)

---

[API](https://skmtc.dev/conductorone/apis/c1-api.md) - [All operations](https://skmtc.dev/conductorone/apis/c1-api/llms.txt) - [OpenAPI document](https://skmtc.dev/conductorone/apis/c1-api/revisions/fe943bedf41b?raw)