---
title: "List Secrets"
method: GET
path: "/v1/organizations/secrets"
tags: ["Organization Secrets"]
---

# List Secrets

`GET /v1/organizations/secrets`

List all secret names in organization vault.

**Security**:
- Returns ONLY secret names, never values
- Use for discovering which secrets are configured
- Secret values can only be retrieved by internal services

**Response**:
- List of secret names (e.g., ['stripe_api_key', 'github_token'])
- Total count of secrets

## Response `200`

Successful Response

- SecretsListResponse — Response for listing secrets in the organization vault. Returns ONLY secret names, never decrypted values. Use this endpoint to discover which secrets are configured in your organization. **Security**: - Returns ONLY secret names, never values - Decrypted values never exposed via API - Use for auditing which secrets are configured **Use Cases**: - Discover which secrets are configured - Audit secret inventory - Check if a secret exists before using it - Verify secret name spelling before referencing in api_call **Permissions**: Requires READ permission to list secrets.
  - `secrets` string[], required — List of secret names in the organization vault. Only names are returned, never decrypted values. Use these names as references in api_call stage configuration. Names are unique within the organization. Empty list if no secrets are configured.
  - `count` integer, required — Total number of secrets in the organization vault. This is the length of the secrets array. Useful for monitoring and auditing secret inventory.

## Other responses

- `400` — Bad Request
- `401` — Unauthorized
- `403` — Forbidden
- `404` — Not Found
- `422` — Validation Error
- `500` — Internal Server Error

---

[API](https://skmtc.net/mixpeek/apis/mixpeek-api.md) · [All operations](https://skmtc.net/mixpeek/apis/mixpeek-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/mixpeek/mixpeek-api/revisions/5d4c905106b4/schema)