Skip to content

List App Secrets

GET
/apps/{app_id}/secrets

Which secrets this app declares, and where they live (M9 item J7).

POINTERS ONLY. There is no value in the response and no column that could hold one: the platform stores which secrets an app declares so a build can be rendered, without ever holding what the build will read.

A hosted app needs config — its own API keys, a database URL, the graph8 credential it calls back with — and there was no route, DTO or operation id for any of it anywhere in the contract.

Authorizations

Parameters

Path Parameters

app_id
required
string

Header Parameters

X-Org-Id
Any of:
string

Responses

200

Successful Response

object
data
required
Array<object>

One declared secret. A POINTER and two timestamps, never a value.

There is no value field and there must never be one. The control plane stores WHICH secrets an app declares and where they live, so a build can be rendered without the platform ever holding what the build will read.

object
created_at
Any of:
string format: date-time
provider_ref
Any of:
string
rotated_at
Any of:
string format: date-time
secret_key
required
string
pagination
Any of:
object
has_next
required

Whether there are more pages

boolean
limit
required

Items per page

integer
next_cursor
Any of:
string
page
required

Current page number (1-indexed)

integer
total
required

Total number of items

integer

422

Validation Error

object
detail
Array<object>
object
loc
required
Array
msg
required
string
type
required
string