---
title: "List Secrets"
method: GET
path: "/vault/secrets"
---

# List Secrets

`GET /vault/secrets`

## Request

- Base URL: `https://api-docs.session-exchange.com` (the document declares no server; this is the origin it was published from)
- URL: `https://api-docs.session-exchange.com/vault/secrets`
- Auth: none declared

Admin of THIS tenant (a tenant admin token, or a human owner/admin session at the tenant's
host): the names + versions of this tenant's secrets and whether the tenant's router producer
is granted read on each. NEVER a value, NEVER another tenant's names — the listing is scoped
to the Host-resolved tenant like every vault route, and the router's own open `/vault` names
endpoint (a cross-tenant leak) is deliberately NOT mirrored. An uninitialised vault lists as
empty (200); an initialised-but-sealed one is 503 like the other data routes.

## Response `200`

Successful Response

- object

---

[API](https://skmtc.dev/session-exchange/apis/a4sx.md) · [All operations](https://skmtc.dev/session-exchange/apis/a4sx/llms.txt) · [OpenAPI document](https://skmtc.dev/session-exchange/apis/a4sx/revisions/abaefc33dfc7?raw)