---
title: "Tenant Secret List"
method: GET
path: "/1/tenants/secrets"
tags: ["Tenant Secret"]
---

# Tenant Secret List

`GET /1/tenants/secrets`

## Request

- Base URL: `http://localhost:3000/api`
- URL: `http://localhost:3000/api/1/tenants/secrets`
- Auth: API key in header `Authorization`
- TypeScript: <https://skmtc.dev/ironcorelabs/apis/vendor-api-bridge/docs/1/tenants/secrets/get.ts> (a function with typed inputs; its response is checked against the schema)

List secrets associated with the vendor's tenants

## Query parameters

- `updatedSince` string, date-time
- `createdSince` string, date-time
- `secretType` 'search' | 'deterministic-encryption' | 'vector'
- `migrationStatus` 'current' | 'needs-migration'
- `rotationStatus` 'current' | 'in-rotation' | 'archived'
- `page` integer
- `pageSize` integer
- `sortDirection` 'asc' | 'desc'
- `sortColumn` 'created' | 'updated'
- `query` string

## Headers

- `icl-requestor-id` string, required

## Request body

- object
  - `ids` TenantSecretId[]: Tenant secret IDs to filter to
  - `tags` TagId[]

## Response `200`

Result of listing tenant secrets

- object
  - `result` TenantSecretListResponseItem[], required: Tenant secrets
    - `id` integer, required: Tenant Secret ID
    - `encryptedSecret` string, required: Base 64 string
    - `secretFingerprint` string, required: Secret fingerprint
    - `secretPath` string, required: Secret path
    - `kmsConfigId` integer, required: KMS configuration ID
    - `tenantId` string, required: Tenant ID
    - `tenantTags` TagId[], required: Tags for the associated tenant
    - `secretType` 'Search' | 'Deterministic' | 'Vector', required: Tenant secret type
    - `migrationStatus` 'Current' | 'NeedsMigration', required: Tenant secret migration status
    - `rotationStatus` 'Current' | 'InRotation' | 'Archived', required: Tenant secret rotation status
    - `created` string, required: RFC3339 timestamp
    - `updated` string, required: RFC3339 timestamp
  - `page` integer, required: Current response page number
  - `totalPages` integer, required: Total number of response pages

## Other responses

- `401`: Unauthorized

---

[API](https://skmtc.dev/ironcorelabs/apis/vendor-api-bridge.md) - [All operations](https://skmtc.dev/ironcorelabs/apis/vendor-api-bridge/llms.txt) - [OpenAPI document](https://skmtc.dev/ironcorelabs/apis/vendor-api-bridge/revisions/5c0e553ffa21?raw)
