---
title: "Env Secret Sources"
method: GET
path: "/vault/env-secrets"
---

# Env Secret Sources

`GET /vault/env-secrets`

## Request

- Base URL: `https://api-docs.session-exchange.com` (the document declares no server; this is the origin it was published from)
- URL: `https://api-docs.session-exchange.com/vault/env-secrets`
- Auth: none declared

Global admin: where each collector secret that used to live raw in the container env is
served from right now (WP-14, docs/secrets-in-vault.md) — `in_use` vault / env / missing, the
DEFAULT tenant's vault name(s) with presence + version, whether the raw env var is still set
and whether it equals the vault value (`env_removable`). NEVER a value. Reads the vault fresh
and refreshes the in-process cache, so a just-written secret is in use after this call.

## Response `200`

Successful Response

- object

---

[API](https://skmtc.dev/session-exchange/apis/a4sx.md) · [All operations](https://skmtc.dev/session-exchange/apis/a4sx/llms.txt) · [OpenAPI document](https://skmtc.dev/session-exchange/apis/a4sx/revisions/abaefc33dfc7?raw)
