Skip to content

Secret Manager API API

by googleapis.com

OAuthHTTPSAnalytics
Open documentation ↗

Overview

Stores sensitive data such as API keys, passwords, and certificates. Provides convenience while improving security.

Secret Manager API is an analytics API from googleapis.com. Requests are authenticated with OAuth. It is served over HTTPS. Its OpenAPI description documents 15 endpoints.

At a glance

Authentication
OAuth
HTTPS
Yes
CORS
Unknown
Category
Analytics
Base URL
https://secretmanager.googleapis.com/
Version
v1beta1
Endpoints
15
Spec updated
2023-04-21

Make a first request

Replace the placeholders; the documentation says exactly where credentials go.

cURL
curl -X GET "https://secretmanager.googleapis.com/v1beta1/NAME" \
  -H "Accept: application/json" \
  -H "Authorization: Bearer YOUR_TOKEN"
JavaScript
const response = await fetch("https://secretmanager.googleapis.com/v1beta1/NAME", {
  method: "GET",
  headers: {
    "Accept": "application/json",
    "Authorization": "Bearer YOUR_TOKEN",
  },
});
const data = await response.json();
console.log(data);
Python
import requests

response = requests.request(
    "GET",
    "https://secretmanager.googleapis.com/v1beta1/NAME",
    headers={
    "Accept": "application/json",
    "Authorization": "Bearer YOUR_TOKEN",
    },
    timeout=30,
)
print(response.json())

Endpoints

MethodPathWhat it does
GET/v1beta1/{name}Gets metadata for a SecretVersion. `projects/*/secrets/*/versions/latest` is an alias to the `latest` SecretVersion.
PATCH/v1beta1/{name}Updates metadata of an existing Secret.
DELETE/v1beta1/{name}Deletes a Secret.
GET/v1beta1/{name}/locationsLists information about the supported locations for this service.
GET/v1beta1/{name}:accessAccesses a SecretVersion. This call returns the secret data. `projects/*/secrets/*/versions/latest` is an alias to the `latest` SecretVersion.
POST/v1beta1/{name}:destroyDestroys a SecretVersion. Sets the state of the SecretVersion to DESTROYED and irrevocably destroys the secret data.
POST/v1beta1/{name}:disableDisables a SecretVersion. Sets the state of the SecretVersion to DISABLED.
POST/v1beta1/{name}:enableEnables a SecretVersion. Sets the state of the SecretVersion to ENABLED.
GET/v1beta1/{parent}/secretsLists Secrets.
POST/v1beta1/{parent}/secretsCreates a new Secret containing no SecretVersions.
GET/v1beta1/{parent}/versionsLists SecretVersions. This call does not return secret data.
POST/v1beta1/{parent}:addVersionCreates a new SecretVersion containing secret data and attaches it to an existing Secret.
GET/v1beta1/{resource}:getIamPolicyGets the access control policy for a secret. Returns empty policy if the secret exists and does not have a policy set.
POST/v1beta1/{resource}:setIamPolicySets the access control policy on the specified secret. Replaces any existing policy. Permissions on SecretVersions are enforced according to the policy set on
POST/v1beta1/{resource}:testIamPermissionsReturns permissions that a caller has for the specified secret. If the secret does not exist, this call returns an empty set of permissions, not a NOT_FOUND err

Questions

Does the Secret Manager API API need an API key?

Yes. The Secret Manager API API uses OAuth authentication; the documentation explains how to get credentials.

Does the Secret Manager API API support HTTPS?

Yes, the Secret Manager API API is served over HTTPS.

How many endpoints does the Secret Manager API API have?

Its OpenAPI description lists 15 endpoints in version v1beta1. All of them are shown on this page.

What are alternatives to the Secret Manager API API?

Other Analytics APIs include Google Play Integrity API, versionhistory.googleapis.com API, Doc Converter, Perspective Comment Analyzer API, Safe Browsing API.

Compare alternatives →

Google Play Integrity API

Analytics

The Play Integrity API helps you check that you're interacting with your genuine app on a genuine Android device powered by Google Play services. The Play Integrity API has replaced SafetyNet Attestation and Android Device Verification.

OAuth1 endpoints

versionhistory.googleapis.com API

Analytics

Version History API - Prod

No auth4 endpoints

Doc Converter

Analytics

This api converts file formats of OpenXml and OpenOffice documents formats to vector files (e.g., svg)

No auth1 endpoints

Perspective Comment Analyzer API

Analytics

The Perspective Comment Analyzer API provides information about the potential impact of a comment on a conversation (e.g. it can provide a score for the "toxicity" of a comment). Users can leverage the "SuggestCommentScore" method to submit corrections to improve Perspective over time. Users can set the "doNotStore" flag to ensure that all submitted comments are automatically deleted after scores are returned.

OAuth2 endpoints

Safe Browsing API

Analytics

Enables client applications to check web resources (most commonly URLs) against Google-generated lists of unsafe web resources. The Safe Browsing APIs are for non-commercial use only. If you need to use APIs to detect malicious URLs for commercial purposes – meaning “for sale or revenue-generating purposes” – please refer to the Web Risk API.

No auth7 endpoints

Web Fonts Developer API

Analytics

The Google Web Fonts Developer API lets you retrieve information about web fonts served by Google.

No auth1 endpoints

Listed from APIs.guru (CC0).