---
title: "List workspace secrets"
method: GET
path: "/sandboxes/secrets"
tags: ["Sandboxes"]
---

# List workspace secrets

`GET /sandboxes/secrets`

## Request

- Base URL: `https://api.hedra.com/v3`
- URL: `https://api.hedra.com/v3/sandboxes/secrets`
- Auth: one of:
  - API key in header `Authorization`
  - HTTP bearer

The names of your workspace's secrets, in one page. A secret's value is
never returned.

## Response `200`

Successful Response

- SandboxSecretListResponse
  - `data` SandboxSecret[], required: Every secret your workspace holds.
    - `name` string, required: The secret's name.
    - `created_at` string, date-time, required
  - `next_cursor` string, nullable, required: Opaque cursor for the next page, or null when this response completes the list. Always present. Endpoints that serve the whole collection at once always return null.

## Other responses

- `400`: Invalid or failed-validation request.
- `401`: Authentication failed: missing, malformed, or invalid credentials.
- `403`: Insufficient scope or plan.
- `404`: Your workspace has no sandbox account.
- `429`: Rate limit exceeded.
- `500`: Internal error.
- `503`: Sandboxes are temporarily unavailable, or are still being set up for your workspace; retry shortly.

## Changes

- **2026-10-23** `e733493214f4`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/hedra-labs/apis/hedra-api/changes/sandboxes/secrets/get.md)

---

[API](https://skmtc.dev/hedra-labs/apis/hedra-api.md) - [All operations](https://skmtc.dev/hedra-labs/apis/hedra-api/llms.txt) - [OpenAPI document](https://skmtc.dev/hedra-labs/apis/hedra-api/revisions/6ef35a11cefe?raw)