> ## Documentation Index
> Fetch the complete documentation index at: https://docs.allium.so/llms.txt
> Use this file to discover all available pages before exploring further.

# List secrets

> List the secrets stored for your organization.

Returns metadata for every secret in the organization that owns your API key. Secret values are never returned.

```bash theme={null}
curl https://api.allium.so/api/v1/secrets \
  -H "X-API-KEY: ${ALLIUM_API_KEY}"
```

**Response:**

```json theme={null}
[
  {
    "id": "<secret_id>",
    "name": "webhook-signing-key",
    "organization_id": "<organization_id>",
    "created_at": "2026-10-01T12:00:00Z",
    "updated_at": "2026-10-01T12:00:00Z"
  }
]
```


## OpenAPI

````yaml _openapi/account-api.json GET /api/v1/secrets
openapi: 3.1.0
info:
  title: Allium Account API
  version: 0.1.0
servers:
  - url: https://api.allium.so
security: []
paths:
  /api/v1/secrets:
    get:
      tags:
        - SECRETS
      summary: List Secrets
      operationId: list_org_secrets_api_v1_secrets_get
      responses:
        '200':
          description: Successful Response
          content:
            application/json:
              schema:
                type: array
                items:
                  $ref: '#/components/schemas/OrgSecret'
                title: Response List Org Secrets Api V1 Secrets Get
        '404':
          $ref: '#/components/responses/NotFound'
      security:
        - APIKeyBearer: []
components:
  schemas:
    OrgSecret:
      properties:
        id:
          type: string
          title: Id
        name:
          type: string
          title: Name
        organization_id:
          type: string
          title: Organization Id
        created_at:
          anyOf:
            - type: string
              format: date-time
            - type: 'null'
          title: Created At
        updated_at:
          anyOf:
            - type: string
              format: date-time
            - type: 'null'
          title: Updated At
      type: object
      required:
        - name
        - organization_id
      title: OrgSecret
      description: Secret metadata. The secret value is never returned.
    ErrorMessage:
      properties:
        message:
          type: string
          title: Message
      type: object
      required:
        - message
      title: ErrorMessage
  responses:
    NotFound:
      description: >-
        The secret does not exist in your organization, or the API key does not
        belong to an organization
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/ErrorMessage'
  securitySchemes:
    APIKeyBearer:
      type: apiKey
      in: header
      name: X-API-KEY

````