> ## Documentation Index
> Fetch the complete documentation index at: https://docs.akua.dev/llms.txt
> Use this file to discover all available pages before exploring further.

# List secrets

> Lists workspace secrets. Metadata only; plaintext values are never returned.



## OpenAPI

````yaml /openapi-public.json get /secrets
openapi: 3.1.0
info:
  title: Akua API
  version: 1.0.0
  description: >-
    Public API for managing Akua workspaces, clusters, products, and installs.


    Authenticate with a workspace API token via the `Authorization: Bearer
    sk_akua_...` header.


    A workspace-owned token implies its workspace. Broad tokens select the
    active workspace via the optional `Akua-Context` header.
  contact:
    name: Akua API support
    email: support@akua.dev
    url: https://akua.dev/docs
servers:
  - url: https://api.akua.dev/v1
    description: Production
security: []
tags:
  - name: Auth
    description: Authentication and token management.
  - name: Agents
    description: Agent identities and configuration.
  - name: Agent sessions
    description: Durable agent conversations and tasks.
  - name: Agent turns
    description: Submitted agent work and event emission.
  - name: Agent events
    description: Normalized agent event history and streams.
  - name: Custom domains
    description: Workspace custom domains and routing targets.
  - name: Cloudflare
    description: Cloudflare account credentials and gateway control.
  - name: Clusters
    description: Kubernetes clusters and cluster access operations.
  - name: ComputeConfigs
    description: Workspace compute provider configurations.
  - name: Entitlements
    description: Effective workspace capabilities and limits.
  - name: Dashboards
    description: Dashboard and widget resources.
  - name: Installs
    description: Installation and render operations.
  - name: Machines
    description: Compute machines and lifecycle events.
  - name: Notifications
    description: User notification state.
  - name: Offer Channels
    description: Private offer channels and policy versions.
  - name: Offers
    description: Marketplace offers and redemption tracking.
  - name: Operations
    description: Long-running operation status and controls.
  - name: Order Drafts
    description: Draft checkout orders and checkout sessions.
  - name: Organizations
    description: Organizations, memberships, and managed workspaces.
  - name: Packages
    description: Software packages, versions, and input schemas.
  - name: Products
    description: Marketplace product catalog resources.
  - name: Preview hostnames
    description: Install preview hostnames and routing state.
  - name: Quotas
    description: Workspace quota limits and usage.
  - name: Regions
    description: Available deployment regions.
  - name: Registry
    description: Container registry credentials and repositories.
  - name: Repository change requests
    description: Fork-backed repository change reviews and lifecycle actions.
  - name: Repositories
    description: Source repositories available to the workspace.
  - name: Secrets
    description: Workspace secrets and secret versions.
  - name: Snippets
    description: Reusable snippets and snippet runs.
  - name: Workspace subdomains
    description: Workspace subdomain identity.
  - name: Workspaces
    description: Workspace resources, members, and billing state.
paths:
  /secrets:
    get:
      tags:
        - Secrets
      summary: List secrets
      description: >-
        Lists workspace secrets. Metadata only; plaintext values are never
        returned.
      operationId: secrets.list
      parameters:
        - schema:
            type: string
            description: Pagination cursor from a previous response's `next_cursor`.
          required: false
          description: Pagination cursor from a previous response's `next_cursor`.
          name: cursor
          in: query
        - schema:
            type: integer
            minimum: 1
            maximum: 100
            default: 50
            description: Items per page (1-100, default 50)
            example: 50
          required: false
          description: Items per page (1-100, default 50)
          name: limit
          in: query
        - schema:
            type: string
            description: Filter by secret kind.
            example: generic
          required: false
          description: Filter by secret kind.
          name: kind
          in: query
        - schema:
            type: string
            minLength: 1
            maxLength: 53
            description: >-
              Optional workspace/scope context for the request. Carries a single
              workspace wire id (`ws_…`) today. Only needed for broad tokens — a
              workspace-owned token implies its workspace.
            example: ws_j572abc123def456
          required: false
          description: >-
            Optional workspace/scope context for the request. Carries a single
            workspace wire id (`ws_…`) today. Only needed for broad tokens — a
            workspace-owned token implies its workspace.
          name: akua-context
          in: header
      responses:
        '200':
          description: Secret list
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/SecretList'
        '401':
          description: Unauthorized
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ApiErrorResponse'
        '403':
          description: Forbidden
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ApiErrorResponse'
      security:
        - BearerAuth:
            - secrets:read
components:
  schemas:
    SecretList:
      type: object
      properties:
        data:
          type: array
          items:
            $ref: '#/components/schemas/Secret'
        has_more:
          type: boolean
          description: True if more items exist after this page.
        next_cursor:
          type:
            - string
            - 'null'
          description: Opaque cursor for the next page, or null if no more pages.
      required:
        - data
        - has_more
        - next_cursor
    ApiErrorResponse:
      type: object
      properties:
        success:
          type: boolean
          enum:
            - false
        errors:
          type: array
          items:
            $ref: '#/components/schemas/ApiErrorEntry'
        result:
          type: object
          properties: {}
          description: Always empty for error responses
      required:
        - success
        - errors
        - result
    Secret:
      type: object
      properties:
        id:
          type: string
          minLength: 1
          maxLength: 54
        html_url:
          type: string
          maxLength: 2048
          format: uri
          description: Absolute dashboard URL for this resource. OUTPUT_ONLY.
          example: https://akua.dev/secrets/sec_j572abc123def456
        workspace_id:
          type: string
          minLength: 1
          maxLength: 53
        name:
          type: string
          minLength: 1
          maxLength: 200
        kind:
          type: string
          description: >-
            Secret kind. Current public create values: cloud_provider/hcloud,
            cloud_provider/aws, cloud_provider/gcp, cloud_provider/azure,
            oci_registry, cloudflare_api, webhook_signing, generic.
            cloud_credential is migration-only metadata and cannot be used for
            new public creates.
          example: generic
        description:
          type: string
          maxLength: 500
        labels:
          type: object
          additionalProperties:
            type: string
            maxLength: 200
        state:
          type: string
          enum:
            - active
            - soft_deleted
        validation:
          $ref: '#/components/schemas/SecretValidation'
        mime_type:
          type: string
          maxLength: 100
        version_aliases:
          type: object
          additionalProperties:
            type: integer
            exclusiveMinimum: 0
        version_count:
          type: integer
          minimum: 0
        enabled_version_count:
          type: integer
          minimum: 0
        created_at:
          type: integer
          minimum: 0
          description: Unix timestamp (seconds)
        updated_at:
          type: integer
          minimum: 0
          description: Unix timestamp (seconds)
        deleted_at:
          type: integer
          minimum: 0
          description: Unix timestamp (seconds)
        purge_at:
          type: integer
          minimum: 0
          description: Unix timestamp (seconds)
        expire_time:
          type: integer
          minimum: 0
          description: Unix timestamp (seconds)
        etag:
          type: string
      required:
        - id
        - html_url
        - workspace_id
        - name
        - kind
        - state
        - validation
        - version_count
        - enabled_version_count
        - created_at
        - updated_at
        - etag
    ApiErrorEntry:
      type: object
      properties:
        code:
          type: integer
          example: 7002
          description: Machine-readable error code
        message:
          type: string
          example: Resource not found
          description: Human-readable error message
        path:
          type: array
          items:
            type: string
          example:
            - body
            - name
          description: Field path that caused the error, when applicable
        metadata:
          type: object
          additionalProperties:
            type: string
      required:
        - code
        - message
    SecretValidation:
      type:
        - object
        - 'null'
      properties:
        state:
          type: string
          enum:
            - unspecified
            - valid
            - invalid
        validated_at:
          type: integer
          minimum: 0
          description: Unix timestamp (seconds)
        error:
          type: string
      required:
        - state
        - validated_at
      description: >-
        Server-managed validation telemetry. Populated for credential-typed
        secrets; null otherwise. OUTPUT_ONLY — clients cannot set this on
        create/update.
  securitySchemes:
    BearerAuth:
      type: http
      scheme: bearer
      description: >-
        workspace API token (sk_akua_...) or OAuth2 JWT. Create tokens at
        https://akua.dev/developers/api-tokens

````