Skip to main content

List Workspace Secrets

GET 
/workspaces/:workspace_id/secrets

List this workspace's secrets by name, with no values.

Open to every workspace role. A viewer or editor who can start a run has to be able to name a secret to bind it, and a name with a description is all that takes — the value is only ever reachable through the admin-only reveal route.

Ordered by name rather than newest-first as list_judge_connections is: a caller is looking for a known name, not browsing recent activity.

name filters to one exact match. Every mutation route is keyed by secret_id while the CLI addresses secrets by name, so without this the client would have to page the whole list and match in Python on every update, delete and reveal. Exact equality rather than a substring: it is served by the (workspace_id, name) unique index, and the caller already knows the name it wants. An unknown name is an empty page, not a 404 — this is a list route, and the caller distinguishes the two by total.

404s on an unknown workspace rather than returning an empty page — for a platform admin the role dependency bypasses membership, so without this a typo'd id would render exactly like a real workspace that holds no secrets.

Request​

Responses​

Successful Response