---
title: "Get Content"
method: POST
path: "/api/v1/secrets/{vault_id}/view"
tags: ["Secrets"]
---

# Get Content

`POST /api/v1/secrets/{vault_id}/view`

GetContent retrieves the encrypted secret content for an authorized recipient.
 Caller must be in the secret's allowed_user_ids list (for INTERNAL secrets).
 Returns content re-encrypted to caller's ephemeral public key.

## Path parameters

- `vault_id` string, required — The vaultId field.

## Request body

- C1ApiSecretsV1PaperSecretServiceGetContentRequestInput — The PaperSecretServiceGetContentRequest message.
  - `readerRecipient` string — Client's ephemeral Age recipient (age1...) for re-encryption Server re-encrypts the content to this recipient

## Response `200`

Successful response

- C1ApiSecretsV1PaperSecretServiceGetContentResponse — The PaperSecretServiceGetContentResponse message. This message contains a oneof named content. Only a single field of the following list may be set at a time: - encryptedContent - downloadUrl
  - `createdAt` string, date-time
  - `creatorUserId` string — The creatorUserId field.
  - `downloadUrl` string, nullable — For file secrets: presigned S3 download URL (5 minute expiry) File is still E2E encrypted - client must decrypt after download This field is part of the `content` oneof. See the documentation for `c1.api.secrets.v1.PaperSecretServiceGetContentResponse` for more details.
  - `encryptedContent` string, base64, nullable — For text secrets: Age-encrypted content (encrypted to reader's recipient) This field is part of the `content` oneof. See the documentation for `c1.api.secrets.v1.PaperSecretServiceGetContentResponse` for more details.
  - `filename` string — Original filename (file secrets only)
  - `inputFormat` 'SECRET_INPUT_FORMAT_UNSPECIFIED' | 'SECRET_INPUT_FORMAT_PLAINTEXT' | 'SECRET_INPUT_FORMAT_JSON' | 'SECRET_INPUT_FORMAT_YAML' | 'SECRET_INPUT_FORMAT_KEY_VALUE' — Input format hint for rendering (text secrets only)
  - `secretType` 'SECRET_TYPE_UNSPECIFIED' | 'SECRET_TYPE_TEXT' | 'SECRET_TYPE_FILE' — Secret metadata
  - `viewsRemaining` integer — Views remaining after this view (-1 = unlimited)

---

[API](https://skmtc.net/conductorone/apis/c1-api.md) · [All operations](https://skmtc.net/conductorone/apis/c1-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/conductorone/c1-api/revisions/d391405a35d3/schema)