---
title: "Search My Secrets"
method: POST
path: "/api/v1/search/secrets/mine"
tags: ["Secrets"]
---

# Search My Secrets

`POST /api/v1/search/secrets/mine`

SearchMySecrets returns secrets created by the current user.
 Automatically scoped to current user - no user_id filter parameter.

## Request body

- C1ApiSecretsV1PaperSecretServiceSearchMySecretsRequest — SearchMySecrets request - for end users viewing their own secrets. Automatically scoped to current user.
  - `pageSize` integer — The pageSize field.
  - `pageToken` string — The pageToken field.
  - `query` string — Fuzzy search by display name
  - `secretType` 'SECRET_TYPE_UNSPECIFIED' | 'SECRET_TYPE_TEXT' | 'SECRET_TYPE_FILE' — Filter by secret type (optional)
  - `sharingMode` 'PAPER_VAULT_SHARING_MODE_UNSPECIFIED' | 'PAPER_VAULT_SHARING_MODE_INTERNAL' | 'PAPER_VAULT_SHARING_MODE_EXTERNAL' — Filter by sharing mode (optional)
  - `sortBy` 'SEARCH_SORT_BY_UNSPECIFIED' | 'SEARCH_SORT_BY_CREATED_DESC' | 'SEARCH_SORT_BY_CREATED_ASC' | 'SEARCH_SORT_BY_EXPIRES_ASC' | 'SEARCH_SORT_BY_NAME_ASC' — Sort order
  - `statuses` string[], nullable — Filter by status (optional)

## Response `200`

Search response for user's own secrets

- C1ApiSecretsV1PaperSecretServiceSearchResponse — Search response for user's own secrets
  - `list` C1ApiSecretsV1PaperSecret[], nullable — The list field.
    - `allowedEmails` string[], nullable — The allowedEmails field.
    - `allowedUserIds` string[], nullable — Access control
    - `contentDeleted` boolean — The contentDeleted field.
    - `contentExpiresAt` string, date-time
    - `contentReady` boolean — Whether content has been set (text uploaded or file uploaded)
    - `contentType` string — The contentType field.
    - `createdAt` string, date-time
    - `creatorUserId` string — Creator
    - `currentViews` integer — The currentViews field.
    - `deletedAt` string, date-time
    - `displayName` string — From Vault
    - `fileSize` string, int64 — File metadata
    - `filename` string — For FILE secrets: original filename (sanitized)
    - `inputFormat` 'SECRET_INPUT_FORMAT_UNSPECIFIED' | 'SECRET_INPUT_FORMAT_PLAINTEXT' | 'SECRET_INPUT_FORMAT_JSON' | 'SECRET_INPUT_FORMAT_YAML' | 'SECRET_INPUT_FORMAT_KEY_VALUE' — The inputFormat field.
    - `maxViews` integer — View tracking
    - `secretType` 'SECRET_TYPE_UNSPECIFIED' | 'SECRET_TYPE_TEXT' | 'SECRET_TYPE_FILE' — The secretType field.
    - `shareCode` string — Human-friendly share code (XXXX-XXXX-XXXX) for shareable URLs
    - `shareUrl` string — URL to share with recipients (populated when content_ready is true)
    - `sharingMode` 'PAPER_VAULT_SHARING_MODE_UNSPECIFIED' | 'PAPER_VAULT_SHARING_MODE_INTERNAL' | 'PAPER_VAULT_SHARING_MODE_EXTERNAL' — From PaperVault
    - `status` 'SECRET_STATUS_UNSPECIFIED' | 'SECRET_STATUS_ACTIVE' | 'SECRET_STATUS_EXPIRED' | 'SECRET_STATUS_BURNED' | 'SECRET_STATUS_REVOKED' | 'SECRET_STATUS_DATA_DELETED' — Computed status
    - `updatedAt` string, date-time
    - `vaultId` string — Vault.id - primary identifier for the secret
  - `nextPageToken` string — The nextPageToken field.

---

[API](https://skmtc.net/conductorone/apis/c1-api.md) · [All operations](https://skmtc.net/conductorone/apis/c1-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/conductorone/c1-api/revisions/d391405a35d3/schema)