---
title: "List Secrets"
method: GET
path: "/workspaces/{workspace_id}/secrets"
tags: ["secrets"]
---

# List Secrets

`GET /workspaces/{workspace_id}/secrets`

## Request

- Base URL: `https://platform.tracecat.com/api`
- URL: `https://platform.tracecat.com/api/workspaces/{workspace_id}/secrets`
- Auth: one of:
  - API key in cookie `fastapiusersauth`
  - HTTP bearer

List user secrets.

## Path parameters

- `workspace_id` string, uuid, required

## Query parameters

- `type` SecretType[], nullable: Filter by secret type

## Response `200`

Successful Response

- SecretReadMinimal[]
  - `id` string, uuid, required
  - `type` 'custom' | 'ssh_key' | 'mtls' | 'ca_cert' | 'github_app', required: The type of a secret.
  - `name` string, required
  - `description` string, nullable
  - `keys` string[], required
  - `environment` string, required
  - `is_corrupted` boolean
  - `source` 'local' | 'aws_secrets_manager': Where a workspace secret's values live.
  - `store_id` string, uuid, nullable
  - `store_name` string, nullable
  - `remote_reference` string, nullable

## Other responses

- `422`: Validation Error

---

[API](https://skmtc.dev/tracecat/apis/tracecat-api.md) - [All operations](https://skmtc.dev/tracecat/apis/tracecat-api/llms.txt) - [OpenAPI document](https://skmtc.dev/tracecat/apis/tracecat-api/revisions/2efdda25045f?raw)