---
title: "List a secret’s versions, newest first (metadata only)"
method: GET
path: "/v1/secrets/{secret_id}/versions"
tags: ["Secrets"]
---

# List a secret’s versions, newest first (metadata only)

`GET /v1/secrets/{secret_id}/versions`

## Request

- Base URL: `https://api.shardflux.dev`
- URL: `https://api.shardflux.dev/v1/secrets/{secret_id}/versions`
- Auth: HTTP bearer

## Path parameters

- `secret_id` string, uuid, required

## Query parameters

- `limit` integer
- `cursor` string

## Response `200`

Default Response

- object
  - `data` object[], required
    - `secret_id` string, uuid, required: UUIDv7, lowercase canonical form.
    - `version` integer, required
    - `state` union, required: current: the value resolved at session start. destroyed: value erased (rotated or deleted); metadata kept for audit.
      - 'current'
      - 'destroyed'
    - `created_by` object, required
      - `type` union, required
        - 'user'
        - 'api_key'
      - `id` string, uuid, required: UUIDv7, lowercase canonical form.
    - `created_at` string, date-time, required: RFC 3339 UTC timestamp with Z.
    - `destroyed_at` string, date-time, nullable, required: RFC 3339 UTC timestamp with Z.
    - `destroyed_reason` union, required
      - 'rotated'
      - 'deleted'
  - `next_cursor` string, nullable, required

## Other responses

- `4XX`: Default Response
- `5XX`: Default Response

---

[API](https://skmtc.dev/shardflux/apis/shardflux-api.md) · [All operations](https://skmtc.dev/shardflux/apis/shardflux-api/llms.txt) · [OpenAPI document](https://skmtc.dev/shardflux/apis/shardflux-api/revisions/ea685f7b39c4?raw)