---
title: "List all secrets"
method: GET
path: "/api/secrets"
tags: ["Admin"]
---

# List all secrets

`GET /api/secrets`

Returns metadata for all secrets (without values)

## Response `200`

List of secret metadata

- object
  - `secrets` SecretMetadata[]
    - `id` string, uuid, required — Unique identifier for the secret
    - `key` string, required — Unique key identifier (uppercase with underscores)
    - `isActive` boolean, required — Whether the secret is currently active
    - `isReserved` boolean, required — Whether the secret is protected from deletion
    - `createdAt` string, date-time, required — When the secret was created
    - `updatedAt` string, date-time, required — When the secret was last updated
    - `expiresAt` string, date-time, nullable — When the secret expires (null if no expiration)

## Other responses

- `401` — Unauthorized
- `403` — Forbidden - Admin only

---

[API](https://skmtc.net/insforge/apis/insforge-authentication-api.md) · [All operations](https://skmtc.net/insforge/apis/insforge-authentication-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/insforge/insforge-authentication-api/versions/a935bb49f932/schema)