---
title: "Search"
method: POST
path: "/api/v1/search/secrets-admin"
tags: ["Secrets Admin"]
---

# Search

`POST /api/v1/search/secrets-admin`

Search returns secrets across the tenant.
 Can filter by creator, sharing mode, status, time range, etc.

## Request body

- C1ApiSecretsV1PaperSecretAdminServiceSearchRequest — Admin search request - can filter by any user's secrets.
  - `createdAfter` string, date-time
  - `createdBefore` string, date-time
  - `creatorUserIds` string[], nullable — Filter by creator user ID (admin can see all users' secrets)
  - `includeDeleted` boolean — Include deleted secrets
  - `pageSize` integer — The pageSize field.
  - `pageToken` string — The pageToken field.
  - `query` string — Fuzzy search by display name
  - `secretType` 'SECRET_TYPE_UNSPECIFIED' | 'SECRET_TYPE_TEXT' | 'SECRET_TYPE_FILE' — Filter by secret type (optional)
  - `sharingMode` 'PAPER_VAULT_SHARING_MODE_UNSPECIFIED' | 'PAPER_VAULT_SHARING_MODE_INTERNAL' | 'PAPER_VAULT_SHARING_MODE_EXTERNAL' — Filter by sharing mode (optional)
  - `sortBy` 'SEARCH_SORT_BY_UNSPECIFIED' | 'SEARCH_SORT_BY_CREATED_DESC' | 'SEARCH_SORT_BY_CREATED_ASC' | 'SEARCH_SORT_BY_EXPIRES_ASC' | 'SEARCH_SORT_BY_NAME_ASC' — Sort order
  - `statuses` string[], nullable — Filter by status (optional)

## Response `200`

Successful response

- C1ApiSecretsV1PaperSecretAdminServiceSearchResponse — The PaperSecretAdminServiceSearchResponse message.
  - `list` C1ApiSecretsV1PaperSecret[], nullable — The list field.
    - `allowedEmails` string[], nullable — The allowedEmails field.
    - `allowedUserIds` string[], nullable — Access control
    - `contentDeleted` boolean — The contentDeleted field.
    - `contentExpiresAt` string, date-time
    - `contentReady` boolean — Whether content has been set (text uploaded or file uploaded)
    - `contentType` string — The contentType field.
    - `createdAt` string, date-time
    - `creatorUserId` string — Creator
    - `currentViews` integer — The currentViews field.
    - `deletedAt` string, date-time
    - `displayName` string — From Vault
    - `fileSize` string, int64 — File metadata
    - `filename` string — For FILE secrets: original filename (sanitized)
    - `inputFormat` 'SECRET_INPUT_FORMAT_UNSPECIFIED' | 'SECRET_INPUT_FORMAT_PLAINTEXT' | 'SECRET_INPUT_FORMAT_JSON' | 'SECRET_INPUT_FORMAT_YAML' | 'SECRET_INPUT_FORMAT_KEY_VALUE' — The inputFormat field.
    - `maxViews` integer — View tracking
    - `secretType` 'SECRET_TYPE_UNSPECIFIED' | 'SECRET_TYPE_TEXT' | 'SECRET_TYPE_FILE' — The secretType field.
    - `shareCode` string — Human-friendly share code (XXXX-XXXX-XXXX) for shareable URLs
    - `shareUrl` string — URL to share with recipients (populated when content_ready is true)
    - `sharingMode` 'PAPER_VAULT_SHARING_MODE_UNSPECIFIED' | 'PAPER_VAULT_SHARING_MODE_INTERNAL' | 'PAPER_VAULT_SHARING_MODE_EXTERNAL' — From PaperVault
    - `status` 'SECRET_STATUS_UNSPECIFIED' | 'SECRET_STATUS_ACTIVE' | 'SECRET_STATUS_EXPIRED' | 'SECRET_STATUS_BURNED' | 'SECRET_STATUS_REVOKED' | 'SECRET_STATUS_DATA_DELETED' — Computed status
    - `updatedAt` string, date-time
    - `vaultId` string — Vault.id - primary identifier for the secret
  - `nextPageToken` string — The nextPageToken field.

---

[API](https://skmtc.net/conductorone/apis/c1-api.md) · [All operations](https://skmtc.net/conductorone/apis/c1-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/conductorone/c1-api/revisions/d391405a35d3/schema)