---
title: "GET /v1/orgs/{orgId}/secrets"
method: GET
path: "/v1/orgs/{orgId}/secrets"
tags: ["Orgs", "Secrets"]
---

# GET /v1/orgs/{orgId}/secrets

`GET /v1/orgs/{orgId}/secrets`

## Request

- Base URL: `https://api.tessl.io`
- URL: `https://api.tessl.io/v1/orgs/{orgId}/secrets`
- Auth: none declared

Lists the organization's secrets by name, with how many environments reference each and the first projects those environments are bound to. Never returns a value.

## Path parameters

- `orgId` string, uuid, required

## Query parameters

- `sort` union
  - union[]
    - union
      - 'name'
      - '-name'
      - 'createdAt'
      - '-createdAt'
      - 'id'
      - '-id'
  - 'name'
  - '-name'
  - 'createdAt'
  - '-createdAt'
  - 'id'
  - '-id'
- `page[size]` number
- `page[after]` string
- `page[before]` string

## Headers

- `Authorization` string

## Response `200`

Default Response

- object
  - `links` object, required
    - `self` string, uri, required
    - `next` string, uri, nullable, required
    - `prev` string, uri, nullable, required
  - `meta` object, required
    - `count` number, required
  - `data` object[], required
    - `id` string, uuid, required
    - `type` 'org-secret', required
    - `attributes` object, required
      - `name` string, required
      - `source` string, required: Where the value came from: the name of the environment the conversion took it from, or `created`.
      - `rotatedAt` string, date-time, nullable, required
      - `environmentCount` integer, required: Environments that reference this secret.
      - `reachableProjects` object[], required: Up to 5 live projects, ordered by name, drawn from a bounded sample of the projects bound to environments that reference this secret, so their runs receive it. The sample is not guaranteed to hold the alphabetically first projects. List them all with `GET /orgs/{orgId}/secrets/{secretId}/projects`.
        - `id` string, uuid, required
        - `name` string, required
        - `workspaceId` string, uuid, required
      - `hasMoreReachableProjects` boolean, required: Whether the secret may reach more projects than `reachableProjects` lists. True when the preview sample was capped or more than the preview size was found.
      - `createdAt` string, date-time, required
      - `updatedAt` string, date-time, required

## Other responses

- `401`: Unauthorized
- `403`: Forbidden
- `404`: Not Found
- `500`: Internal Server Error

## Changes

- **2026-10-21** `a388ee77a37c`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/tessl/apis/tessl-api/changes/v1/orgs/:orgId/secrets/get.md)

---

[API](https://skmtc.dev/tessl/apis/tessl-api.md) · [All operations](https://skmtc.dev/tessl/apis/tessl-api/llms.txt) · [OpenAPI document](https://skmtc.dev/tessl/apis/tessl-api/revisions/7386f1e6295b?raw)