---
title: "Get Secret Store"
method: GET
path: "/organization/secret-stores/{store_id}"
tags: ["organization-secret-stores"]
---

# Get Secret Store

`GET /organization/secret-stores/{store_id}`

## Request

- Base URL: `https://platform.tracecat.com/api`
- URL: `https://platform.tracecat.com/api/organization/secret-stores/{store_id}`
- Auth: one of:
  - API key in cookie `fastapiusersauth`
  - HTTP bearer

Get a store, including its persisted trust-policy inputs.

## Path parameters

- `store_id` string, uuid, required

## Response `200`

Successful Response

- SecretStoreRead: Organization view of a secret store, including trust-policy inputs.
  - `id` string, uuid, required
  - `organization_id` string, uuid, required
  - `name` string, required
  - `description` string, nullable
  - `provider` 'aws_secrets_manager', required: Supported external secret store providers.
  - `config` AwsSecretsManagerStoreConfig, required: Persisted provider configuration for an AWS Secrets Manager store.
    - `provider` 'aws_secrets_manager'
    - `role_arn` string, nullable
    - `region` string, required
    - `external_id` string, required
  - `enabled` boolean, required
  - `all_workspaces` boolean, required
  - `tracecat_aws_account_id` string, nullable
  - `tracecat_aws_principal_arn` string, nullable
  - `aws_partition` string, nullable: AWS partition of the store region, when botocore knows it.
  - `authorized_workspace_ids` string[]
  - `reference_count` integer
  - `workspace_usage` SecretStoreWorkspaceUsage[]: Referencing secret counts per workspace, most used first.
    - `workspace_id` string, uuid, required
    - `secret_count` integer, required
  - `created_at` string, date-time, required
  - `updated_at` string, date-time, required

## Other responses

- `422`: Validation Error

---

[API](https://skmtc.dev/tracecat/apis/tracecat-api.md) - [All operations](https://skmtc.dev/tracecat/apis/tracecat-api/llms.txt) - [OpenAPI document](https://skmtc.dev/tracecat/apis/tracecat-api/revisions/2efdda25045f?raw)