---
title: "The org's stored secrets, names only (values are never shown)"
method: GET
path: "/preview/secrets"
tags: ["secrets"]
---

# The org's stored secrets, names only (values are never shown)

`GET /preview/secrets`

## Request

- Base URL: `https://autoresearch.sfcompute.com`
- URL: `https://autoresearch.sfcompute.com/preview/secrets`
- Auth: HTTP bearer

Your org's stored secrets, BY NAME ONLY - values are sealed on arrival and never shown to you or anyone: there is nothing here to paste anywhere. Returns [{name, created_at, last_used_at}]. Reference one as an env value in run_command or submit_job: env: {WANDB_API_KEY: {secret: "wandb-prod"}} - the platform resolves it at launch and the value never appears in this chat. Honest limits, stated plainly: a stored secret still enters the container's environment, so code running there can read it or print it; for reading private datasets prefer a connection (list_connections) - there the credential never enters the container at all. Missing the secret you need? A human org admin adds one from their own terminal or CI - `autor secret create` - and NEVER pastes a token, key, or password into this chat (transcripts are recorded and outlive the task). Secret mutations are not callable over MCP. Org secrets are org-wide: a vended workspace token (the per-tenant credential) can neither list nor reference them.

## Query parameters

- `cursor` string: Opaque page cursor: the `next_cursor` a previous response returned. Omit for the first page.
- `limit` integer: Rows per page. Clamped to the range shown.
- `workspace` string

## Response `200`

The capability's JSON result.

- List: The list envelope every paging endpoint returns.
  - `items` Result[], required
    - `object` string: The resource type, when the result is one resource.
  - `next_cursor` string: Pass as ?cursor= for the next page. Absent on the last page. Opaque: never parse it.
  - `object` 'list', required

## Other responses

- `400`: Malformed request: bad JSON, a parameter that does not parse, or a value outside its range. Code `invalid`.
- `401`: No bearer token, or one this API cannot verify. Code `unauthenticated`.
- `403`: Authenticated, but the token's scopes or the account's role do not reach this operation. The message names the scope word to request. Code `forbidden`.
- `404`: No such route. Code `not_found`; the body names the OpenAPI document.
- `422`: A well-formed request the platform declined: no such node, a cap reached, a state that forbids the move. The message says which, and what to do instead. Code `refused`.
- `429`: Over this door's per-customer budget. Wait `Retry-After` seconds. Code `rate_limited`.
- `500`: Our fault. Retry; if it persists, quote the request-id. Code `internal`.

---

[API](https://skmtc.dev/givemeanode/apis/autoresearch-customer-api.md) · [All operations](https://skmtc.dev/givemeanode/apis/autoresearch-customer-api/llms.txt) · [OpenAPI document](https://skmtc.dev/givemeanode/apis/autoresearch-customer-api/revisions/f88dcb70ac6c?raw)