---
title: "List the app's secret items"
method: GET
path: "/v1/instances/{id}/app/secrets"
tags: ["public", "apps"]
---

# List the app's secret items

`GET /v1/instances/{id}/app/secrets`

## Request

- Base URL: `https://api.vozora.io`
- URL: `https://api.vozora.io/v1/instances/{id}/app/secrets`
- Auth: API key in header `Authorization`

Names, purposes, classifications and revisions — never a value. Needs apps:read. Note that apps:secrets does NOT imply apps:read: a key that will both discover items and read one must be minted with both.

## Path parameters

- `id` string, required

## Response `200`

OK

- SecretsMetadataListResponse
  - `items` SecretsItemMetadata[]
    - `acknowledgement_required` boolean
    - `active_revision` integer
    - `classification` 'customer_revealable' | 'machine_only' | 'recovery_critical'
    - `delivery_revision` integer
    - `item` string
    - `purpose` string
    - `revealable` boolean
    - `service_id` string
    - `state` 'active' | 'terminated'
    - `updated_at` string

## Other responses

- `401`: invalid or missing API key
- `403`: the key lacks apps:read
- `404`: no such instance

---

[API](https://skmtc.dev/vozora/apis/vozora-api.md) · [All operations](https://skmtc.dev/vozora/apis/vozora-api/llms.txt) · [OpenAPI document](https://skmtc.dev/vozora/apis/vozora-api/revisions/56f15734fc5a?raw)