---
title: "Get agent secrets"
method: GET
path: "/v2/agents/{agent_key}/secrets"
tags: ["Agent Secrets"]
---

# Get agent secrets

`GET /v2/agents/{agent_key}/secrets`

Returns the agent's secrets. Values are always masked (`****`). Plaintext is never exposed on read.

## Path parameters

- `agent_key` string, required — A unique key that identifies an agent.

## Headers

- `Request-Timeout` integer
- `Request-Timeout-Millis` integer

## Response `200`

The agent's secrets, with values masked.

- AgentSecrets — Agent-scoped secrets for the agent. On read, values are masked (`****`). Plaintext is never returned. Reference values from a tool's `argument_override` via `{"$ref": "agent.secrets.<name>"}`.
  - `secrets` object, required — Map of secret name to masked value.

## Other responses

- `403` — Permissions do not allow accessing this agent.
- `404` — Agent not found.

---

[API](https://skmtc.net/vectara/apis/vectara-rest-api-v2.md) · [All operations](https://skmtc.net/vectara/apis/vectara-rest-api-v2/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/vectara/vectara-rest-api-v2/versions/fca567a46b3a/schema)