HashiCorp Vault icon

HashiCorp Vault

Interact with HashiCorp Vault to manage secrets

Actions4

List Secrets

AI-generated

Summary

Lists secrets within a specified HashiCorp Vault secrets engine path.

Inputs

  • secretEngine (required) — The name of the secrets engine (mount path).
  • listPath — The path to list secrets from. Defaults to empty string, listing the root of the engine.
  • additionalFields — A collection of optional settings including timeout, custom headers, and secret masking options.

Output shape

An item containing a JSON object with a 'keys' array of secret names and the 'path' string.

The operation queries the Vault API at the specified path with a 'list=true' query parameter. The 'keys' array contains the names of secrets located at that path. If Mask Secret Values is enabled, matching keys (e.g., password, token) are masked in the returned data with '***'.

Examples

Example 1: List all secrets in the 'secret' engine root

Secret Engine: 'secret', List Path: (empty)

Example 2: List secrets within a specific app path

Secret Engine: 'secret', List Path: 'myapp/database'

Links

Discussion