# Get a secret

`GET /v1.0/secrets/{secretStoreName}/{secretName}`

This endpoint lets you get the value of a secret for a given secret store.

## Request

### Path parameters

| Name | Type | Required | Description |
| --- | --- | --- | --- |
| `secretStoreName` | string | Yes | The name of the secret store to get the secret from. Pattern: `^[a-zA-Z0-9_-]+$`. |
| `secretName` | string | Yes | The name of the secret to get. Pattern: `^[a-zA-Z0-9_-]+$`. |

### Query parameters

| Name | Type | Required | Description |
| --- | --- | --- | --- |
| `metadata.version_id` | string | No | Version ID for secret stores that support versioning (Hashicorp Vault, GCP Secret Manager, AWS Secret Manager). |
| `metadata.version_stage` | string | No | Version stage for AWS Secret Manager (e.g., production, staging). |
| `metadata.namespace` | string | No | Kubernetes namespace for Kubernetes Secrets. |

## Responses

### 200 — Secret retrieved successfully

`application/json`

For secret stores with multiple key-values: JSON object with key names as fields. For name/value semantics: JSON object with secret name as key and secret value as value.

Type: `object<string, string>`.

### 204 — Secret not found

### 400 — Secret store is missing or misconfigured

### 403 — Access denied

### 500 — Failed to get secret or no secret stores defined