---
title: "List secrets in a specified key vault."
method: GET
path: "/secrets"
tags: ["Secrets"]
---

# List secrets in a specified key vault.

`GET /secrets`

The Get Secrets operation is applicable to the entire vault. However, only the base secret identifier and its attributes are provided in the response. Individual secret versions are not listed in the response. This operation requires the secrets/list permission.

## Query parameters

- `maxresults` integer
- `api-version` string, required

## Response `200`

A response message containing a list of secrets in the vault along with a link to the next page of secrets.

- SecretListResult — The secret list result.
  - `value` SecretItem[] — A response message containing a list of secrets in the key vault along with a link to the next page of secrets.
    - `id` string — Secret identifier.
    - `attributes` SecretAttributes — The object attributes managed by the KeyVault service.
      - `enabled` boolean — Determines whether the object is enabled.
      - `nbf` integer — Not before date in UTC.
      - `exp` integer — Expiry date in UTC.
      - `created` integer — Creation time in UTC.
      - `updated` integer — Last updated time in UTC.
    - `tags` object — Application specific metadata in the form of key-value pairs.
    - `contentType` string — Type of the secret value such as a password.
    - `managed` boolean — True if the secret's lifetime is managed by key vault. If this is a key backing a certificate, then managed will be true.
  - `nextLink` string — The URL to get the next set of secrets.

## Other responses

- `default` — Key Vault error response describing why the operation failed.

---

[API](https://skmtc.net/azure/apis/keyvaultclient.md) · [All operations](https://skmtc.net/azure/apis/keyvaultclient/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/azure/keyvaultclient/revisions/1f612999ec40/schema)