> ## Documentation Index
> Fetch the complete documentation index at: https://docs.tai42.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Read the stored env config, secret-key marks and the stored keys the deployment sets

> Return the stored env map alongside the operator's secret-key marks and the deployment-set keys.

``data.env`` is the stored env key-value map (a never-written store yields
an empty map). ``data.secret_keys`` is the DERIVED masked-key set
(:func:`~tai42_skeleton.settings.env_secret_marks.effective_secret_keys`): the
operator's stored ``TAI_ENV_SECRET_KEYS`` marks UNIONED with every live
``connectors[*].client_secret_env``, so an oauth connector's client secret is
masked on display even with no operator mark. ``data.deployment_keys`` names the
stored keys the deployment sets on any worker of the fleet, sorted: a key a worker's
deployment env sets, or an accepted name of a settings field set under any of its names. Such
a stored copy never takes effect (the deployment's value wins); a write may remove
it or carry it unchanged, never set it to a new value. A deployment key with no
stored copy is not named.



## OpenAPI

````yaml /openapi.json get /api/config/env
openapi: 3.1.0
info:
  description: >-
    The operator HTTP surface served under /api/*. The platform's core routes.
    Plugin routes are published by each plugin.
  title: tai42-skeleton API
  version: 35.0.0
servers: []
security: []
paths:
  /api/config/env:
    get:
      tags:
        - config
      summary: >-
        Read the stored env config, secret-key marks and the stored keys the
        deployment sets
      description: >-
        Return the stored env map alongside the operator's secret-key marks and
        the deployment-set keys.


        ``data.env`` is the stored env key-value map (a never-written store
        yields

        an empty map). ``data.secret_keys`` is the DERIVED masked-key set

        (:func:`~tai42_skeleton.settings.env_secret_marks.effective_secret_keys`):
        the

        operator's stored ``TAI_ENV_SECRET_KEYS`` marks UNIONED with every live

        ``connectors[*].client_secret_env``, so an oauth connector's client
        secret is

        masked on display even with no operator mark. ``data.deployment_keys``
        names the

        stored keys the deployment sets on any worker of the fleet, sorted: a
        key a worker's

        deployment env sets, or an accepted name of a settings field set under
        any of its names. Such

        a stored copy never takes effect (the deployment's value wins); a write
        may remove

        it or carry it unchanged, never set it to a new value. A deployment key
        with no

        stored copy is not named.
      operationId: get_api_config_env
      responses:
        '200':
          content:
            application/json:
              schema:
                properties:
                  data:
                    $ref: '#/components/schemas/EnvView'
                required:
                  - data
                type: object
          description: Success.
        '401':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
          description: Missing or invalid api key.
      security:
        - ApiKeyAuth: []
components:
  schemas:
    EnvView:
      description: >-
        The stored env map plus the operator's masked-key marks and the stored
        keys the deployment sets.


        ``env`` values are verbatim (masking is display-side, never on the
        wire); ``secret_keys`` names which

        keys the UI masks; ``deployment_keys`` names the stored keys the
        deployment sets, which a write may

        remove or carry unchanged but never set to a new value.
      properties:
        deployment_keys:
          items:
            type: string
          title: Deployment Keys
          type: array
        env:
          additionalProperties:
            type: string
          title: Env
          type: object
        secret_keys:
          items:
            type: string
          title: Secret Keys
          type: array
      required:
        - env
        - secret_keys
        - deployment_keys
      title: EnvView
      type: object
    Error:
      properties:
        code:
          description: >-
            Stable machine-readable reason a client keys a dedicated error state
            on, present on refusals that opt in (e.g. a 501 not-configured
            refusal). Optional: absent when the error carries only a
            human-readable message.
          type: string
        error:
          type: string
      required:
        - error
      type: object
  securitySchemes:
    ApiKeyAuth:
      in: header
      name: x-api-key
      type: apiKey

````

This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.