> ## Documentation Index
> Fetch the complete documentation index at: https://docs.slng.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# List Vault

> List every Vault entry for the authenticated organisation, ordered by name. Secret values are masked (value null, has_value true); variable values are included for authorized readers.



## OpenAPI

````yaml /api-reference/agents/shared-resources.oas.yaml get /v1/agents/secrets
openapi: 3.1.0
info:
  title: SLNG Agent Resources API
  version: 1.0.0
  description: >-
    Public control-plane API for agent resources: tools, MCP servers, Vault
    secrets and variables, and client models.
servers:
  - url: https://api.agents.slng.ai
    description: Production
security:
  - bearerAuth: []
tags:
  - name: Tools
    description: Create, test, publish, version, and attach agent tools.
    x-page-icon: wrench
  - name: MCP servers
    description: Configure MCP servers and refresh their live capabilities.
    x-page-icon: plug
  - name: Vault
    description: >-
      Store organisation secrets and readable variables without exposing secret
      values.
    x-page-icon: key
  - name: Client models
    description: Manage bring-your-own LLM provider credentials.
    x-page-icon: brain
paths:
  /v1/agents/secrets:
    get:
      tags:
        - Vault
      summary: List Vault
      description: >-
        List every Vault entry for the authenticated organisation, ordered by
        name. Secret values are masked (value null, has_value true); variable
        values are included for authorized readers.
      operationId: listVault
      responses:
        '200':
          description: >-
            The organisation Vault entries, ordered by name, with secret values
            masked.
          content:
            application/json:
              schema:
                items:
                  $ref: '#/components/schemas/OrgSecretOut'
                type: array
                title: Response V1 List Vault
              example:
                - id: 3fa85f64-5717-4562-b3fc-2c963f66afa6
                  organisation_id: 9c1e5b2a-1111-4c3d-8e2f-abcdef012345
                  name: STRIPE_KEY
                  kind: secret
                  description: Primary Stripe API key
                  value: null
                  has_value: true
                  is_managed: false
                  revision: 2
                  created_by: user:alice
                  last_rotated_by: user:bob
                  last_rotated_at: '2026-08-20T12:00:00Z'
                  created_at: '2026-08-01T09:00:00Z'
                  updated_at: '2026-08-20T12:00:00Z'
                - id: 5c2f7a10-3333-4e5f-a1b2-c3d4e5f60789
                  organisation_id: 9c1e5b2a-1111-4c3d-8e2f-abcdef012345
                  name: DEFAULT_REGION
                  kind: variable
                  description: Default deployment region
                  value: us-east-1
                  has_value: true
                  is_managed: false
                  revision: 1
                  created_by: user:alice
                  last_rotated_by: null
                  last_rotated_at: null
                  created_at: '2026-08-05T10:00:00Z'
                  updated_at: '2026-08-05T10:00:00Z'
        '401':
          $ref: '#/components/responses/UnauthorizedError'
        '403':
          $ref: '#/components/responses/ForbiddenError'
        '429':
          $ref: '#/components/responses/RateLimitError'
        '500':
          $ref: '#/components/responses/InternalServerError'
components:
  schemas:
    OrgSecretOut:
      properties:
        id:
          type: string
          format: uuid
          title: Id
        organisation_id:
          type: string
          format: uuid
          title: Organisation Id
        name:
          type: string
          title: Name
        kind:
          type: string
          enum:
            - secret
            - variable
          description: >-
            Kind of this entry: `secret` values are never returned, `variable`
            values are readable by authorized callers.
          title: Kind
        description:
          anyOf:
            - type: string
            - type: 'null'
          title: Description
        value:
          anyOf:
            - type: string
            - type: 'null'
          description: >-
            The stored value, returned only for variables to authorized readers.
            Always null for secrets, whose value is never returned.
          title: Value
        has_value:
          type: boolean
          description: >-
            Whether a value is stored. True even for secrets, whose value is
            withheld from responses.
          title: Has Value
          default: true
        is_managed:
          type: boolean
          description: >-
            Whether this entry is managed by SLNG rather than created directly
            by your organisation.
          title: Is Managed
          default: false
        revision:
          type: integer
          title: Revision
        created_by:
          anyOf:
            - type: string
            - type: 'null'
          title: Created By
        last_rotated_by:
          anyOf:
            - type: string
            - type: 'null'
          title: Last Rotated By
        last_rotated_at:
          anyOf:
            - type: string
              format: date-time
            - type: 'null'
          title: Last Rotated At
        created_at:
          type: string
          format: date-time
          title: Created At
        updated_at:
          type: string
          format: date-time
          title: Updated At
      type: object
      required:
        - id
        - organisation_id
        - name
        - kind
        - revision
        - created_at
        - updated_at
      title: OrgSecretOut
      description: >-
        List and detail view of a Vault entry. Secret values are never returned;
        variable values are returned to authorized readers in `value` (null for
        secrets).
      example:
        id: 3fa85f64-5717-4562-b3fc-2c963f66afa6
        organisation_id: 9c1e5b2a-1111-4c3d-8e2f-abcdef012345
        name: STRIPE_KEY
        kind: secret
        description: Primary Stripe API key
        value: null
        has_value: true
        is_managed: false
        revision: 2
        created_by: user:alice
        last_rotated_by: user:bob
        last_rotated_at: '2026-08-20T12:00:00Z'
        created_at: '2026-08-01T09:00:00Z'
        updated_at: '2026-08-20T12:00:00Z'
    ApiErrorResponse:
      type: object
      description: Standard error envelope returned for failed requests.
      required:
        - detail
        - error
      properties:
        detail:
          type: string
          description: Short human-readable summary of the error.
        error:
          $ref: '#/components/schemas/ApiErrorDetail'
      example:
        detail: A shared secret or variable named 'STRIPE_KEY' already exists
        error:
          code: RESOURCE_CONFLICT
          message: A shared secret or variable named 'STRIPE_KEY' already exists
          request_id: 018f9b2c-7e4a-7c3d-9a1b-2c3d4e5f6a7b
    ApiErrorDetail:
      type: object
      description: Structured error detail carried inside an error response.
      required:
        - code
        - message
      properties:
        code:
          type: string
          description: Stable machine-readable error code.
          example: RESOURCE_CONFLICT
        message:
          type: string
          description: Human-readable explanation of the error.
          example: A shared secret or variable named STRIPE_KEY already exists
        request_id:
          type:
            - string
            - 'null'
          description: Identifier for this request, useful when contacting support.
          example: req_01H8XY7Z9QEXAMPLE
        retryable:
          type: boolean
          description: Whether retrying the same request may succeed.
          example: false
        fields:
          type: array
          description: >-
            Per-field validation problems, when the error relates to specific
            request fields.
          items:
            type: object
            additionalProperties: true
          example: []
      example:
        code: PUBLIC_SHARED_RESOURCES_DISABLED
        message: Public shared resources are disabled for this organisation
        request_id: req_01H8XY7Z9QEXAMPLE
        retryable: false
  responses:
    UnauthorizedError:
      description: The API key is missing or invalid.
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/ApiErrorResponse'
          example:
            detail: Invalid API key
            error:
              code: AUTH_REQUIRED
              message: Invalid API key
              request_id: 018f9b2c-7e4a-7c3d-9a1b-2c3d4e5f6a7b
              retryable: false
    ForbiddenError:
      description: >-
        The caller lacks permission, or the public shared-resource API is
        disabled for the organisation.
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/ApiErrorResponse'
          examples:
            permission_denied:
              summary: Owner or admin access required
              value:
                detail: Organisation owner or admin access required
                error:
                  code: PERMISSION_DENIED
                  message: Organisation owner or admin access required
                  request_id: 018f9b2c-7e4a-7c3d-9a1b-2c3d4e5f6a7b
                  retryable: false
            api_disabled:
              summary: Public shared-resource API disabled for the organisation
              value:
                detail: >-
                  Public shared-resource API access is disabled for this
                  organisation
                error:
                  code: PUBLIC_SHARED_RESOURCES_DISABLED
                  message: >-
                    Public shared-resource API access is disabled for this
                    organisation
                  request_id: 018f9b2c-7e4a-7c3d-9a1b-2c3d4e5f6a7b
                  retryable: false
    RateLimitError:
      description: >-
        The organisation exceeded its request rate limit. Retry after the window
        resets.
      headers:
        Retry-After:
          schema:
            type: integer
        X-RateLimit-Limit:
          schema:
            type: integer
        X-RateLimit-Remaining:
          schema:
            type: integer
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/ApiErrorResponse'
          example:
            detail: Rate limit exceeded. Maximum 60 requests per 60 seconds.
            error:
              code: INTERNAL_ERROR
              message: Rate limit exceeded. Maximum 60 requests per 60 seconds.
              request_id: 018f9b2c-7e4a-7c3d-9a1b-2c3d4e5f6a7b
              retryable: false
    InternalServerError:
      description: The request failed unexpectedly. Secret values are never exposed.
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/ApiErrorResponse'
          example:
            detail: An unexpected error occurred.
            error:
              code: INTERNAL_ERROR
              message: An unexpected error occurred.
              request_id: 018f9b2c-7e4a-7c3d-9a1b-2c3d4e5f6a7b
              retryable: false
  securitySchemes:
    bearerAuth:
      type: http
      scheme: bearer
      bearerFormat: SLNG API key
      description: Your SLNG consumer API key.

````