List secrets API Reference

GET

/tenants/{tenant}/secrets

curl --request GET \
  --url https://api.kupe.cloud/api/v1/tenants/acme/secrets \
  --header 'Authorization: <Authorization>'

List all managed secrets for the tenant. Returns secret metadata and sync configuration, but not the secret values themselves (those are stored in the vault).

Authorizations

• BearerAuth

Parameters

Path Parameters

tenant

required

string

Tenant name

Responses

200

List of secrets

Media type application/json

object

items

Array<object>

object

createdAt

string

name

string

resourceVersion

string

secretPath

string

status

object

conditions

Array<object>

object

key

additional properties

phase

string

syncStatuses

Array<object>

object

key

additional properties

sync

Array<object>

object

cluster

string

namespace

string

secretName

string

Example

{
  "items": [
    {
      "createdAt": "2026-03-10T09:15:00Z",
      "name": "database-creds",
      "resourceVersion": "582019",
      "secretPath": "services/database/credentials",
      "status": {
        "phase": "Synced"
      },
      "sync": [
        {
          "cluster": "production",
          "namespace": "app",
          "secretName": "db-credentials"
        }
      ]
    }
  ]
}

400

Invalid tenant name

Media type application/json

object

code

string

error

string

field

string

message

string

severity

string

Example ^generated

{
  "code": "example",
  "error": "example",
  "field": "example",
  "message": "example",
  "severity": "example"
}

401

Missing or invalid authentication

Media type application/json

object

code

string

error

string

field

string

message

string

severity

string

Example ^generated

{
  "code": "example",
  "error": "example",
  "field": "example",
  "message": "example",
  "severity": "example"
}

403

Not a member of this tenant

Media type application/json

object

code

string

error

string

field

string

message

string

severity

string

Example ^generated

{
  "code": "example",
  "error": "example",
  "field": "example",
  "message": "example",
  "severity": "example"
}

429

Rate limit exceeded

Media type application/json

object

code

string

error

string

field

string

message

string

severity

string

Example ^generated

{
  "code": "example",
  "error": "example",
  "field": "example",
  "message": "example",
  "severity": "example"
}