# grove.secrets.application.get()

Read an application Keychain value.

## Signature

```ts
grove.secrets.application.get(key: string): Promise<string | null>
```

## Availability

All packaged runtimes with storage.secure, including settings pages. The storage capability for persistent browser data is separate.

## Parameters

| Parameter | Required | Description |
| --- | --- | --- |
| `key` | Yes | Nonempty key after trimming surrounding whitespace, at most 200 characters, no control characters. |

## Return value

Resolves to the stored string, or `null` if the key does not exist. Empty string is a stored value and differs from null.

## Behavior and errors

The namespace is isolated by extension identifier and shared across every network instance of that extension. It also matches the default namespace when grove.info.networkID is empty. Missing grants, invalid keys/values, and Keychain failures reject with Error. Handle failures without logging credentials. Uninstall removes the extension's secret namespaces; these methods do not access Mango's own network passwords.

## Example

```js
try {
  const value = await grove.secrets.application.get('service-session')
  if (value === null) console.info('Service sign-in is needed')
} catch {
  console.error('Could not read the service session.')
}
```

See [Storage and settings](storage-and-settings.md).