---
title: "List environment variables (secrets masked): every entry, or with ?environment= the one value each name has there"
method: GET
path: "/projects/{projectId}/env"
tags: ["Environment"]
---

# List environment variables (secrets masked): every entry, or with ?environment= the one value each name has there

`GET /projects/{projectId}/env`

## Request

- Base URL: `https://hostingsurge.com/api/v1`
- URL: `https://hostingsurge.com/api/v1/projects/{projectId}/env`
- Auth: one of:
  - HTTP bearer
  - API key in cookie `__Host-hs_session`

## Path parameters

- `projectId` string, uuid, required

## Query parameters

- `reveal` '0' | '1' | 'true' | 'false': Return secret values (needs the reveal scope)
- `environment` 'production' | 'preview' | 'development': Only the value each name has in this environment (production, preview or development)
- `gitBranch` string: With environment=preview: that branch's own value first, as its preview gets it

## Response `200`

Variables

- object
  - `items` object[], required
    - `id` string, uuid, required
    - `key` string, required
    - `value` string, nullable, required: null when secret and not revealed
    - `secret` boolean, required
    - `targets` string[], required: the environments this entry's value is for; one name can have one entry per environment
    - `gitBranch` string, nullable, required: set: a preview value for this Git branch only
    - `buildtime` boolean, required
    - `runtime` boolean, required
    - `updatedAt` string, required: ISO-8601 timestamp

## Other responses

- `400`: Invalid request (code invalid_request)
- `401`: Missing or invalid session/token (code unauthorized)
- `403`: Authenticated but not permitted (code forbidden)
- `404`: Not found or not visible to the caller (code not_found)
- `409`: Conflicting state (code conflict)
- `429`: Too many requests (code rate_limited); see Retry-After
- `503`: Hosting engine unavailable (code provider_unavailable)

---

[API](https://skmtc.dev/hostingsurge/apis/hostingsurge-platform-api.md) · [All operations](https://skmtc.dev/hostingsurge/apis/hostingsurge-platform-api/llms.txt) · [OpenAPI document](https://skmtc.dev/hostingsurge/apis/hostingsurge-platform-api/revisions/4d08337cdff1?raw)