---
search:
  tags:
    - Operations
    - GET
seo:
  description: >-
    Owner-only. Returns the names of the secrets stored for this app so the
    owner can… Reference for the GET /app/{id}/secrets endpoint in the Charming
    API API.
sidebar:
  badge: GET
  label: List the app secret NAMES (never values)
title: List the app secret NAMES (never values)
type: openapi-operation
---
Owner-only. Returns the names of the secrets stored for this app so the owner can see what is set. Values are never returned by any endpoint — secrets are write-only from the dashboard and are only decrypted host-side when an app references one. Requires the owner's user token; app/render tokens are rejected.

<Operation source="reference" id="list-app-secrets" />

Found a bug or need a feature? [Tell us](/docs/capabilities/feedback) with `submit_feedback` or `POST /app/{id}/feedback`. Your feedback shapes what we build next.