---
title: "List vault item metadata"
method: GET
path: "/secrets"
tags: ["Secrets"]
---

# List vault item metadata

`GET /secrets`

## Request

- Base URL: `https://api.marboba.com/v1`
- URL: `https://api.marboba.com/v1/secrets`
- Auth: HTTP bearer

Read-only metadata listing. Encrypted values are never returned. Requires admin scope (PAT only) — even secret names are sensitive enough to gate behind a human-issued credential.

## Query parameters

- `type` string
- `appId` string

## Response `200`

Secret metadata sorted by name (case-insensitive)

- object
  - `secrets` Secret[]
    - `id` string, required
    - `name` string, required
    - `type` string, required: Vault item type (`text`, `file`, `keystore`, etc.).
    - `category` string, nullable
    - `keyword` string, nullable
    - `deploymentOnly` boolean, required
    - `maskedPreview` string, nullable: First few characters of the secret followed by `…`. Safe to log; useful for spotting the right secret without unsealing it.
    - `fileName` string, nullable
    - `fileSize` integer, nullable
    - `appId` string, nullable: Owning project (component) id, or null if org-wide.
    - `createdAt` string, date-time, nullable
    - `updatedAt` string, date-time, nullable

## Other responses

- `401` (unresolved $ref)
- `403` (unresolved $ref)

---

[API](https://skmtc.dev/marboba/apis/marboba-public-rest-api.md) · [All operations](https://skmtc.dev/marboba/apis/marboba-public-rest-api/llms.txt) · [OpenAPI document](https://skmtc.dev/marboba/apis/marboba-public-rest-api/revisions/5b96d525d88d?raw)