---
title: "List secrets"
method: GET
path: "/v1/secrets"
tags: ["Secrets"]
---

# List secrets

`GET /v1/secrets`

## Request

- Base URL: `https://api.sandbase.ai`
- URL: `https://api.sandbase.ai/v1/secrets`
- Auth: one of:
  - HTTP bearer
  - API key in header `X-API-Key`

List Secret metadata with offset pagination.

## Query parameters

- `limit` integer
- `offset` integer

## Response `200`

Secret page

- SecretList
  - `data` object[], required
    - `id` string, required: Secret ID (`sec_` prefix).
    - `name` string, required
    - `kind` 'mcp_bearer', required
    - `server_url` string, required
    - `status` 'pending' | 'active' | 'disabled', required: disabled means revoked.
    - `row_version` integer, required
    - `created_at` string, date-time, required
    - `updated_at` string, date-time, required
  - `total` integer, required
  - `limit` integer, required
  - `offset` integer, required

## Other responses

- `401`: unauthorized: missing, malformed, or conflicting API key headers
- `402`: spending_limit_exceeded: API key spending limit or organization balance exhausted
- `403`: insufficient_scope (scoped key) or org_disabled
- `503`: authorization_unavailable, admission_unavailable, executor_unavailable, storage_unavailable, or internal_error

---

[API](https://skmtc.dev/sandbase/apis/sandbase-api.md) · [All operations](https://skmtc.dev/sandbase/apis/sandbase-api/llms.txt) · [OpenAPI document](https://skmtc.dev/sandbase/apis/sandbase-api/revisions/d40df2467ba2?raw)