bhatti secret list

List your secrets by name. Values are never returned by the API.

Synopsis

bhatti secret list

Description

Returns metadata for each secret you own — name, created-at, updated-at — but never the encrypted value or the decrypted plaintext. Once a secret is set, the value can be replaced (with bhatti secret set NAME new-value) but not read back.

This is intentional. The encryption-at-rest model assumes the value is read by the server only when injecting into a sandbox; exposing it via the API would defeat the point.

Examples

bhatti secret list

OPENAI_KEY
DATABASE_URL
GITHUB_TOKEN

# JSON for scripting
bhatti secret list --json

[
  {"name": "OPENAI_KEY", "created_at": "2026-04-15T10:00:00Z", "updated_at": "2026-04-29T14:22:00Z"},
  {"name": "DATABASE_URL", "created_at": "2026-04-22T09:15:00Z", "updated_at": "2026-04-22T09:15:00Z"}
]

Options

This command takes only global flags. See Global flags for --url, --token, --json, --timing, --data-dir.

See also

• API: GET /secrets