Documentation menu

Get secret bindings

GEThttps://api.instacloud.com/projects/{projectId}/secret-bindings

Token scope: account · org · project — read-only tokens allowed.

List explicit provider credential bindings — for one compute service, or for the whole branch when target is omitted. Gated — secrets.read.

Parameters

NameInTypeRequiredDescription
branchquerystringnoBranch name (defaults to the project's default branch)
targetquerystringnotarget compute service ref: "compute/<name>"; omit for every binding on the branch
projectIdpathstringyes

Responses

200

Default Response

FieldTypeRequiredDescription
bindingsobject[]yes
bindings.envNamestringyes
bindings.sourceNamestringyes
bindings.targetobjectyes
bindings.target.idstringyes
bindings.target.typestringyes
bindings.target.namestringyes
bindings.sourceobjectyes
bindings.source.idstringyes
bindings.source.typestringyes
bindings.source.namestringyes

202

Default Response

FieldTypeRequiredDescription
status"approval_required"no
approvalIdstringno
actionstringnothe gated action, or a comma-joined compound set — prefer `actions`
actionsstring[]noevery capability this approval covers
messagestringno
urlstringnothe console page where a project admin reviews this request
nextActionsobject[]no
nextActions.opstringyesNeutral logical action id, e.g. "service.add" — NOT an operationId or a CLI/MCP tool name; each client maps it to its own surface.
nextActions.reasonstringyesNatural-language, human/LLM-facing "why do this now".
nextActions.argsobjectnoSuggested, flat named arguments; "<placeholder>"s where a value is unknown.
nextActions.gatedbooleannoTrue if the action passes a governance gate.

400

Default Response

FieldTypeRequiredDescription
errorstringyes

404

Default Response

FieldTypeRequiredDescription
errorstringyes

View as Markdown