Get a secret

Retrieve a Runpod account secret’s metadata by ID. The secret value is write-only and is never returned.

GET /v2/account/secrets/{id}

Get a secret

cURL

curl --request GET \
  --url https://api.runpod.io/v2/account/secrets/{id} \
  --header 'Authorization: Bearer <token>'

200

{
  "id": "2q9m7x4cavgd",
  "name": "hf-token",
  "description": "Hugging Face read token",
  "createdAt": "2026-08-01T12:00:00Z",
  "valueLastUpdatedAt": "2026-09-01T08:30:00Z"
}

Authorizations

Authorization · string · header · required

Runpod API key authentication. Generate an API key in the Runpod console and send it in the Authorization header as Bearer <api_key>. Keys are scoped to the permissions granted when created; requests may return 403 when a valid key lacks access to the requested resource or action.

Path Parameters

id · string · required

Secret identifier

Response

200

application/json

OK

An account-scoped secret: an encrypted string stored by Runpod, referenced from pod, serverless, and template environment variables with the {{ RUNPOD_SECRET_<name> }} placeholder, substituted with the secret's value when the pod or worker boots. The value is write-only and never returned by the API.

id · string · required

Unique secret identifier

Example:

"2q9m7x4cavgd"

name · string · required

Unique, human-readable name — the <name> referenced by the RUNPOD_SECRET_<name> placeholder. Immutable after creation.

Example:

"hf-token"

createdAt · string<date-time> · required

When the secret was created

description · string | null

Human-readable description

Example:

"Hugging Face read token"

valueLastUpdatedAt · string<date-time> | null

When the secret's value was last set (creation or rotation)