---
title: "Vault Status"
method: GET
path: "/vault/status"
---

# Vault Status

`GET /vault/status`

## Request

- Base URL: `https://api-docs.session-exchange.com` (the document declares no server; this is the origin it was published from)
- URL: `https://api-docs.session-exchange.com/vault/status`
- Auth: none declared

This tenant's vault posture — NEVER returns any secret value or key material.
Intentionally unauthenticated (the unseal-recovery flow and liveness need it while sealed).
NOTE: `secret_count`/`grant_count` are numeric counts only (no values); leaving them public is
a consciously-accepted LOW (see the 2026-09-15 audit) rather than break the documented status
shape used by tooling/monitoring.

## Response `200`

Successful Response

- object

---

[API](https://skmtc.dev/session-exchange/apis/a4sx.md) · [All operations](https://skmtc.dev/session-exchange/apis/a4sx/llms.txt) · [OpenAPI document](https://skmtc.dev/session-exchange/apis/a4sx/revisions/abaefc33dfc7?raw)