# Agentic Endpoints Vault - Retrieve Encrypted Item

> Agentic Endpoints Vault - Retrieve Encrypted Item is a paid API for AI agents from agentic-endpoints-testnet.oliver-835.workers.dev, paid per call via x402, $0.02/call, status unknown (last checked 2026-09-14).

Retrieves a previously stored encrypted item from a namespaced vault using the namespace token issued at claim time

## Facts

- Endpoint: GET https://agentic-endpoints-testnet.oliver-835.workers.dev/vault/retrieve
- Price: $0.02/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-14
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/agentic-endpoints-vault-retrieve-encrypted-item-2fb11df1
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_MMSTdWdM1dbnI_wXtdbMX

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability agentic-endpoints-vault-retrieve-encrypted-item-2fb11df1
```

Example prompt: Retrieve the encrypted item stored under the key 'api-credentials' in the 'myapp-prod' namespace of the vault — I have the namespace token 'tok_abc123xyz' from when I first claimed it.

## When to prefer this

Use this endpoint when you need to securely retrieve a value previously stored in the agentic vault and you hold the namespace_token issued at namespace claim time. This is the correct endpoint when you want read-only access to a vault item without deleting it. Prefer this over the delete endpoint when you want to preserve the stored item after retrieval, and over the key-exists check when you need the actual item content, not just its presence.

## Known failure modes

- Invalid or expired namespace_token returns 401/403 unauthorized
- Key not found in the specified namespace returns 404
- Missing required parameters (key, namespace, or namespace_token) returns 400 bad request
- Attempting to access a namespace that was never claimed returns an error
- Payment failure or insufficient credit (x402 payment required) returns 402

## How this service works

Retrieve an encrypted item from the vault (requires the namespace_token issued at claim time)

## Output

The endpoint returns the encrypted item previously stored at the specified key within the given namespace. The caller receives the stored value (ciphertext or decrypted content depending on the vault implementation), validated against the namespace token to ensure only the authorized namespace owner can access it.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "key": {
   "type": "string",
   "description": "Item key to retrieve"
  },
  "namespace": {
   "type": "string",
   "description": "Vault isolation scope"
  },
  "namespace_token": {
   "type": "string",
   "description": "One-time token issued by the first /vault/store call that claimed this namespace"
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/agentic-endpoints-vault-retrieve-encrypted-item-2fb11df1/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from agentic-endpoints-testnet.oliver-835.workers.dev](https://www.zero.xyz/host/agentic-endpoints-testnet.oliver-835.workers.dev/llms.txt)