---
title: "GET /team/secrets"
method: GET
path: "/team/secrets"
tags: ["team"]
---

# GET /team/secrets

`GET /team/secrets`

## Request

- Base URL: `https://api.scalar.com/core`
- URL: `https://api.scalar.com/core/team/secrets`
- Auth: HTTP bearer

List the team's secrets, without values, or its vars, with values, in one environment

## Query parameters

- `environment` string, required
- `kind` 'secret' | 'var', required

## Response `200`

Default Response

- object
  - `secrets` object[], required
    - `uid` string, required
    - `environment` string, required
    - `name` string, required
    - `kind` 'secret' | 'var', required
    - `value` string
    - `fingerprint` string, required
    - `createdAt` number, required
    - `rotatedAt` number, nullable, required
    - `createdBy` string, nullable, required
    - `rotatedBy` string, nullable, required

## Other responses

- `400`: Bad request
- `401`: No auth
- `403`: Forbidden
- `404`: Not found
- `422`: Invalid payload
- `500`: Uncaught error

## Changes

- **2026-10-13** `31d9832a717b`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/scalar/apis/core/changes/team/secrets/get.md)

---

[API](https://skmtc.dev/scalar/apis/core.md) - [All operations](https://skmtc.dev/scalar/apis/core/llms.txt) - [OpenAPI document](https://skmtc.dev/scalar/apis/core/revisions/b3aa8493faa8?raw)