---
title: "List secrets (metadata only — values are never echoed)"
method: GET
path: "/secrets"
tags: ["Secrets"]
---

# List secrets (metadata only — values are never echoed)

`GET /secrets`

## Query parameters

- `workflowId` string — ULID identifier (26-char Crockford base32).
- `orgId` string
- `before` string
- `after` string
- `limit` integer

## Response `200`

Page of secret metadata.

- SecretList
  - `data` Secret[], required
    - `name` string, required
    - `scope` 'user' | 'workflow' | 'org', required — Scope determines visibility — `user` = available to all the user's workflows; `workflow` = scoped to one workflow id; `org` = scoped to an org id.
    - `workflowId` string — ULID identifier (26-char Crockford base32).
    - `orgId` string
    - `createdAt` integer
    - `updatedAt` integer
  - `pageInfo` PageInfo, required
    - `hasNextPage` boolean, required
    - `hasPreviousPage` boolean, required
    - `startCursor` string — Cursor for the first item in the current page; pass to `before` for the previous page.
    - `endCursor` string — Cursor for the last item in the current page; pass to `after` for the next page.

## Other responses

- `401` — Missing or invalid bearer token.

---

[API](https://skmtc.net/avaprotocol/apis/ava-protocol-avs-api.md) · [All operations](https://skmtc.net/avaprotocol/apis/ava-protocol-avs-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/avaprotocol/ava-protocol-avs-api/revisions/caa86e825f53/schema)