Skip to main content
MysteryBox is now called SecretStash. The Nebius AI Cloud CLI, API and Terraform provider still use the mysterybox service identifier. Keep using mysterybox in scripts and manifests.
You can get information about secrets, their versions and payloads: For more information, see About SecretStash.

​
How to get a list of secrets

Run the following command:
To include secrets that have been deleted in the last 30 days and can still be restored, add --show-scheduled-for-deletion:

​
How to get a list of versions

To get versions of a given secret, run the following command:
The command contains the following parameters:
  • --parent-id: ID of the secret. To get the ID, run nebius mysterybox secret list.
  • --show-scheduled-for-deletion (optional): In addition to existing versions, lists versions that have been deleted in the last 30 days and can still be restored.

​
How to get a payload

Before you begin, make sure you are in a group that has at least the mysterybox.payload-viewer role. You can check this in the Administration → IAM section of the web console.
Creating a secret or a version of a secret does not automatically grant you access to view payloads in that secret or version. The editor role is enough to create a secret or a version, but viewing payloads requires the mysterybox.payload-viewer role, which is a sub-role of admin but not editor.
To get the payload of a given version, run the following command:
In the command, set the following parameters:
  • --secret-id: ID of the secret. To get the ID, run nebius mysterybox secret list.
  • --version-id (optional): ID of the version. To get the ID, run nebius mysterybox secret-version list —parent-id <secret_ID>. If you do not specify --version-id, the command returns the payload of the primary version.