List credentials

GET

/v1/credentials

const url = 'https://example.com/v1/credentials';
const options = {method: 'GET', headers: {Authorization: 'Bearer <token>'}};

try {
  const response = await fetch(url, options);
  const data = await response.json();
  console.log(data);
} catch (error) {
  console.error(error);
}

curl --request GET \
  --url https://example.com/v1/credentials \
  --header 'Authorization: Bearer <token>'

Tenant-scoped. Only metadata and the masked hint are returned — never secret material (invariant

Authorizations

oidcBearer

Responses

200

All credentials for the tenant.

application/json

object

credentials

required

Array<object>

object

required

The cred_<uuidv7> resource ID.

string

name

required

string

auth_type

required

string

Allowed values: bearer api_key none

source

required

string

Allowed values: managed vault

masked_hint

Present only for source=managed — a redacted hint of the secret, never the secret itself.

string

vault_ref

Present only for source=vault.

string

version

required

Incremented on each rotation.

integer

created_at

required

string format: date-time

updated_at

required

string format: date-time

Example

{
  "credentials": [
    {
      "auth_type": "bearer",
      "source": "managed"
    }
  ]
}

401

Missing or invalid bearer token, or the token’s tenant/user claims are absent. No body.

500

An unexpected server-side error. No body (internal detail is never returned to callers, invariant