---
title: "List secrets"
method: GET
path: "/secrets"
tags: ["secrets"]
---

# List secrets

`GET /secrets`

Lists secret registry metadata. Plaintext values are never returned.

## Query parameters

- `remoteNode` string
- `workspace` string
- `limit` integer
- `offset` integer

## Response `200`

List of secrets

- SecretListResponse
  - `secrets` SecretResponse[], required
    - `id` string, required
    - `workspace` string, required — global for workspace-less secrets, otherwise the workspace name.
    - `ref` string, required — Secret ref used from DAG YAML, for example prod/db-password.
    - `description` string
    - `providerType` 'dagu-managed' | 'vault' | 'kubernetes' | 'gcp' | 'aws' | 'azure' | 'alibaba', required
    - `providerConnectionId` string
    - `providerRef` string
    - `providerRefFingerprint` string
    - `currentVersion` integer, required
    - `status` 'active' | 'disabled', required
    - `hasValue` boolean, required
    - `createdAt` string, date-time, required
    - `updatedAt` string, date-time, required
    - `lastCheckedAt` string, date-time
    - `lastResolvedAt` string, date-time
    - `lastRotatedAt` string, date-time
  - `total` integer, required

## Other responses

- `401` — Not authenticated
- `403` — Not authorized
- `default` — Generic error response

---

[API](https://skmtc.net/dagucloud/apis/dagu.md) · [All operations](https://skmtc.net/dagucloud/apis/dagu/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/dagucloud/dagu/revisions/93cc41f2018a/schema)