Skip to main content
POST
Get secret credentials (pre-v1.3 endpoint)
Retrieves a secret’s credentials (login, password, SSH key) using the pre-v1.3 authentication model — the Access Token goes in the JSON request body, not the Authorization header. Still supported for backward compatibility, but new consumers should use GET /api/secrets/{id}/password instead.
This endpoint passes the Access Token in the request body rather than a header. This is the original ACB authentication pattern preserved for backward compatibility — the response shape and field set are otherwise equivalent to the new endpoint.
For ACB deployments updated from a version prior to 1.2, switch to the https://{hostname}/EkranACB server in the Playground.

Where to get the Secret ID

The Secret ID is visible on the Automation tab of the Edit Secret page — see Find the Secret ID.

Permissions required

The user owning the Access Token must have at least PAM User role on the secret.

Errors

See Status codes. Common errors:
  • 401 Unauthorized — expired or invalid Access Token.
  • 403 Forbidden — user lacks the PAM User role (or higher) on this secret.
  • 404 Not Found — secret doesn’t exist or isn’t visible to the authenticated user.

Get secret credentials (new)

The v1.3+ equivalent with header-based auth.

Get access token

How to obtain the Access Token this endpoint requires.

API reference

Status codes, rate limiting.

Secret permissions

Role types and permission grants.

Body

application/json
accessToken
string
required

Access Token returned by get_access_token.

secretId
integer<int32>
required

The ID of the secret. Find it on the Automation tab of the Edit Secret page.

Required range: x >= 1

Response

Credentials returned successfully

login
string

Login name.

password
string

Password value.

ssh_key
object

SSH key data (UnixAccountSSH only).

domain
string

AD domain (ADAccount only).

server
string

Server hostname (Unix/MSSQL accounts).

computer_name
string

Target computer (WindowsAccount only).

url
string

Application URL (WebAccount only).