---
id: workflow-config-list
title: List secrets and variables
description: >-
  Lists the entries defined at a place: a folder (`path`) or a workflow
  (`workflow`), exactly one of the two. With `ancestors=true`, returns the whole
  precedence chain up to `/`, flagging each row's `effective` winner. Secret
  values are never included.
sidebar_label: List secrets and variables
hide_title: true
hide_table_of_contents: true
api: >-
  eJzlWG1vGzcS/isDokASdCW5RYq2Au6DEzgH9y6OkRe4h8DwUstZLRsuuSW5kvcE/ffDkPumF8uOv56/WNolhw9nnnlmRhvm+dKx+Vd2Y+y3XJk1OMwsegdcC1hxK/lCoWO3CRPoMisrL41mc/Zv6bwDXyCg9laiA4G51CiAe+BQKZ7hHDjkRgm08DKtuC/SV2AscFh3h71Mu4/pqwTwnmdeNWA0gsmDcb82U7iRvoCU6wydN9b9w9sa0wQs+trqCGJdGIVQWcxQoM4QsoJLDXUF3kA6SxPIFV8upV4C8qwAa9YvHKSY55h5ucIU1lJrtFP4FO4PK65qdMAtgsYVWpA6U7VAMWUJMxVaTo64FGzOuitMMqNzuZwr6TxLWMUtL9GjJf9umCSv/V2jbVjCNC+RzRn5hCXMZQWWnM03zDcVPXfeSr1k232nv4vODM6dwvva11ypBvA+U7WTK4R18FTvU8KK97ysFFmd8YzsTKTH0rFtchxTt/l7cPXksZijJf+fQBeIMH3w/D7MxwAsjFHINSMAOa+VZ/OcK4cHiC5jtAI38lopsOiMqultS40IZkQAIoibsu1twhxmtZW+CYFbILdoz2tfsPnXW3pt0VVGO3SE7OezM/q3e/znIS8oBpnRHrWndbyqlMwCeWZ/OVq8ObymWfyFWeCQJap5GY8S3I9XcWs5OS7Gk55LHwL9NvDwQvvg132bu0jP24SnxOzSfQoXu5kYY0ZLBm6BFKi9zCn1ycuBlCA9KLlCdyyP1lZ6nBitmjntaEbJFVMZBSwa4LoBizwkmsW/a2lRkEJJ0ZEkBMgiXSazyD2Kc/pcV6L9fLvvOSkOWTxOjSxf3v28+F38lJ9xonfk4uGOXd997NguQOqof5JeOeAO0h82m05Mp1fn7y9gu40upBcrboenu2l6dX13fn1596+L/xCS9qbHU2CH8WVZ+xi9NAgklPxbG5sQhJH/g7hbFDzzKIAi0KwLtEhZGUXp0buPpQheprMUZDzL2CXX8r+B4WCN8a+mcG3RofawLlD3NaOJTAGj+zJxWq8GaXoU3TFBegwEcb07ITgieO3YWbpWijzN5uTo/bM/kIN7QufGgjZ60mZZLwrbhPXa84ToBqPrY3VwThfyBVrwhXRU2KiUuXEtJAzSOyBWh5NLI45eDHVdUqq1WTXk1GH9vyEyQa+EENN6gNK5d80dtOaghRHZaI2nhwFPu+BNc7TWDDl+BHJubMk9m5M44sTLEmnLIAVP3NL9Jez1n38e6vlbJYk6aK2xCWV3paiG/PHpw9X36fuuQpO5RxU61BJaCQsjmk5SJlyLSd+fAWpRGam9a5lHrVfJs0JqnJCY0irIjCCdrh29ROf4EqcHRSYc9XiGvT9mPAGcLqeQSr3iSoo7IlyaDN+DWtCDeIk7Krl3shMueqGNv8tNrcWeKO5YCBSO+E/L+rU1Kylwv7EkhSMy9nrSxf6XY7H/ovG+wqCUDi1Vq+CiE3GvrFkoLH98OP7XccWTYu8814JbMSbBy4/v3sKvv539Cu1ZINBzqVwSMYpQgR7ClL46DHvE8VjUA2OB1sCXj5dduAvvKzefzfpG2DXOYzkVuJoF0G54pY2fHAvws2wQEVqXnqLBlfHQr3ee+3p0ZSa1xyXa8Y7XZ69DR0kufcz0MMwEeZYC1vmdzG/eLG7yql6eacB7mpXobKkpmNkjcPuLutmop5jtmQ0VJDjmSEu4G7Wu8hkNIYtibc65VLVFNw9pEdW6Qgsmz1ELmpRyiSq0YUOHebI/fahzGF3NeazczGVcz+K09ORcLmvnoeArKjqxKYT29AZekPi8GFQ82PSFoelsiXEYI2hj17bHU4dFSR2HtNqqERd5JadU6yvFPRWNaWbKnfngEyV2vPt4SuivQYa6MSZU97CIJe2Hd10h+uPmM9sGfuSGthOeGLqfpmfTM9aznF2N4MD59WVo2IzzJQ9K085QNJw/MMjvcWMzaNj/90jfRszjvZ+F4h7aCKsGXn/t+08XpZ/oc5uwwjhPbzebBXf4xartlh7HsZZIJaQj34t2Vj0RgefM90eBf8Nm+Hmh7WNZGLmfDuY5Q/1JOKNfFp4J6flT/Ulg458cBmS39CWmTRj8E1YgF2hDTOPG8yzDyo92HXR/ZKWXon9efGYJ47sasacJwXqn5roZ2d5s4orP5hvq7ZZ16D19Z9vb7Xb7P1vt8qY=
sidebar_class_name: get api-method
info_path: docs/api/nullplatform-api
custom_edit_url: null
canonical: 'https://docs.nullplatform.com/docs/api/workflow-config-list'
---
<Heading
  as={"h1"}
  className={"openapi__heading"}
  children={"List secrets and variables"}
>
</Heading>

<MethodEndpoint
  method={"get"}
  path={"/workflows/config"}
  context={"endpoint"}
>

</MethodEndpoint>

Lists the entries defined at a place: a folder (`path`) or a workflow (`workflow`), exactly one of the two. With `ancestors=true`, returns the whole precedence chain up to `/`, flagging each row's `effective` winner. Secret values are never included.

<Heading
  id={"request"}
  as={"h2"}
  className={"openapi-tabs__heading"}
  children={"Request"}
>
</Heading>

<ParamsDetails
  parameters={[{"in":"query","name":"path","schema":{"type":"string"},"description":"Folder place. Mutually exclusive with `workflow`.","example":"/action-items"},{"in":"query","name":"workflow","schema":{"type":"string"},"description":"Workflow reference. Mutually exclusive with `path`."},{"in":"query","name":"ancestors","schema":{"type":"boolean","default":false},"description":"Include the full resolution chain with `effective` flags."}]}
>

</ParamsDetails>

<RequestSchema
  title={"Body"}
  body={undefined}
>

</RequestSchema>

<StatusCodes
  id={undefined}
  label={undefined}
  responses={{"200":{"description":"The entries.","content":{"application/json":{"schema":{"type":"object","properties":{"data":{"type":"array","items":{"title":"ConfigEntry","type":"object","description":"A secret or variable. Exactly one of `path` or `workflow` identifies the place it lives. Secret values are write-only: they are never returned by any read.","required":["id","name","secret","createdAt","updatedAt"],"properties":{"id":{"type":"string","example":"cfg_2b9d1f0a"},"name":{"type":"string","description":"Referenced in definitions as `${{ secrets.NAME }}` or `${{ vars.NAME }}`.","example":"NP_API_KEY"},"secret":{"type":"boolean","description":"Immutable. `true` makes the value write-only and redacted everywhere."},"path":{"type":"string","description":"Folder place (`/` is the organization root). Present when the entry lives on a folder.","example":"/action-items"},"workflow":{"type":"string","description":"Workflow reference. Present when the entry lives on one workflow."},"value":{"type":"string","nullable":true,"description":"Only returned for non-secret entries."},"effective":{"type":"boolean","description":"Only with `ancestors=true`: whether this row wins precedence for its name."},"mode":{"type":"string","enum":["created","updated"],"description":"Write responses only: whether the entry was created or its value rotated."},"createdBy":{"type":"string"},"createdAt":{"type":"string","format":"date-time"},"updatedAt":{"type":"string","format":"date-time"}}}}}}}}},"4XX":{"description":"Client error, as plain JSON.","content":{"application/json":{"schema":{"title":"ConfigError","type":"object","description":"The error body secrets-and-variables endpoints return: a machine-readable code plus a message.","properties":{"error":{"type":"string","description":"Machine-readable code, e.g. `invalid_name`, `invalid_place`, `secret_flag_immutable`, `not_found`.","example":"invalid_place"},"message":{"type":"string","example":"Provide exactly one of path or workflow"}}}}}},"5XX":{"description":"Unexpected server error.","content":{"application/problem+json":{"schema":{"title":"Problem","type":"object","description":"The standard error body (RFC 7807 problem details, served as `application/problem+json`).","properties":{"type":{"type":"string","description":"Error type URI, e.g. `https://workflow-system.dev/errors/workflow-not-found`.","example":"https://workflow-system.dev/errors/workflow-not-found"},"title":{"type":"string","example":"Not found"},"status":{"type":"integer","example":404},"detail":{"type":"string","example":"No workflow with id wf_ifWBbWfpug0n exists"},"instance":{"type":"string","example":"/workflows/definitions/wf_ifWBbWfpug0n"},"errors":{"type":"array","description":"Present on validation failures: one entry per offending field.","items":{"type":"object","properties":{"path":{"type":"string","example":"/steps/scan/config"},"message":{"type":"string","example":"must have required property 'code'"}}}}}}}}}}}
>

</StatusCodes>