List sealed secrets (names and hints, never values)

GET

/v1/console/secrets

curl --request GET \
  --url 'https://example.com/v1/console/secrets?scope=tenant' \
  --header 'Authorization: Bearer <token>'

• this engine

Lists secret names and non-secret hints, never values. Omitted scope requires global superadmin; explicit scope=tenant admits any unconfined member of the tenant and returns the tenant’s mcp/, env/ and credential/ names to its admins only, and to every member only their own vault// items, whose hint is the item’s kind (login, login+totp, note or totp).

Authorizations

• bearerAuth
• browserSession

Parameters

Query Parameters

scope

string

Allowed values: tenant

Omit for superadmin global secrets; tenant selects the tenant’s own names: mcp/, env/ and credential/ for tenant admins, and every member’s personal vault// items for that member alone. Writes require the deployment’s step-up in either scope.

Header Parameters

X-Olivares-Tenant

string format: uuid

Target tenant in explicit tenant mode.

Responses

200

OK

Media type application/json

object

sealer_available

boolean

secrets

Array<object>

object

created_at

string format: date-time

description

string

hint

string

name

string

updated_at

string format: date-time

Example ^generated

{
  "sealer_available": true,
  "secrets": [
    {
      "created_at": "2026-04-15T12:00:00Z",
      "description": "example",
      "hint": "example",
      "name": "example",
      "updated_at": "2026-04-15T12:00:00Z"
    }
  ]
}

400

Bad request

Media type application/json

object

error

required

object

code

required

string

message

required

string

module

With code module_not_enabled: the namespace of the module this node does not run.

string

Example ^generated

{
  "error": {
    "code": "example",
    "message": "example",
    "module": "example"
  }
}

401

Unauthenticated

Media type application/json

object

error

required

object

code

required

string

message

required

string

module

With code module_not_enabled: the namespace of the module this node does not run.

string

Example ^generated

{
  "error": {
    "code": "example",
    "message": "example",
    "module": "example"
  }
}

403

Forbidden

Media type application/json

object

error

required

object

code

required

string

message

required

string

module

With code module_not_enabled: the namespace of the module this node does not run.

string

Example ^generated

{
  "error": {
    "code": "example",
    "message": "example",
    "module": "example"
  }
}

404

Not found

Media type application/json

object

error

required

object

code

required

string

message

required

string

module

With code module_not_enabled: the namespace of the module this node does not run.

string

Example ^generated

{
  "error": {
    "code": "example",
    "message": "example",
    "module": "example"
  }
}

409

Conflict / setup required

Media type application/json

object

error

required

object

code

required

string

message

required

string

module

With code module_not_enabled: the namespace of the module this node does not run.

string

Example ^generated

{
  "error": {
    "code": "example",
    "message": "example",
    "module": "example"
  }
}

429

Rate limited

Media type application/json

object

error

required

object

code

required

string

message

required

string

module

With code module_not_enabled: the namespace of the module this node does not run.

string

Example ^generated

{
  "error": {
    "code": "example",
    "message": "example",
    "module": "example"
  }
}