---
title: "Search My Vended Credentials"
method: POST
path: "/api/v1/search/app-secrets/my-vended-credentials"
tags: ["App Secrets"]
---

# Search My Vended Credentials

`POST /api/v1/search/app-secrets/my-vended-credentials`

## Request

- Base URL: `https://example.conductor.one`
- URL: `https://example.conductor.one/api/v1/search/app-secrets/my-vended-credentials`
- Auth: HTTP bearer and OAuth 2
  - Client credentials
  - Token URL: `/auth/v1/token`

Lists credentials C1 issued to the signed-in requester. This is separate
 from the general secret inventory because a connector can discover other
 secret resources on the same account.

## Request body

- C1ApiAppV1SearchMyVendedCredentialsRequest: SearchMyVendedCredentialsRequest has the same filters as the general inventory search, but its distinct type carries the self-only permission. The server always scopes results to the signed-in requester's issuance tickets; callers cannot provide an identity-user filter.
  - `appId` string: The appId field.
  - `expandMask` C1ApiAppV1AppSecretExpandMask: The AppSecretExpandMask message.
    - `paths` string[], nullable: The paths field.
  - `pageSize` integer: The pageSize field.
  - `pageToken` string: The pageToken field.
  - `query` string: The query field.
  - `refs` C1ApiAppV1AppSecretRef[], nullable: The refs field.
    - `appId` string: The appId field.
    - `appResourceTypeId` string: The appResourceTypeId field.
    - `id` string: The id field.
  - `resourceTypeIds` string[], nullable: The resourceTypeIds field.

## Response `200`

Successful response

- C1ApiAppV1SearchAppSecretsWithAlertCountResponse: The SearchAppSecretsWithAlertCountResponse message.
  - `expanded` object[], nullable: The expanded field.
    - `@type` string: The type of the serialized message.
  - `list` C1ApiAppV1AppSecretResourceView[], nullable: The list field.
    - `alertCount` integer: The alertCount field.
    - `appPath` string: The appPath field.
    - `appSecret` C1ApiAppV1AppSecretResource: The AppSecretResource message.
      - `appId` string: The app that this secret belongs to.
      - `appResourceTypeId` string: The secret type that this secret is.
      - `createdAt` string, date-time, nullable
      - `createdByAppUserId` string: The ID of the app user that created the AppSecret. Distinct from identity_app_user_id, the current holder.
      - `deletedAt` string, date-time, nullable
      - `displayName` string: The display name for this secret.
      - `id` string: The id of the secret.
      - `identityAppUserId` string: The ID of the user that is associated with the AppSecret.
      - `lastUsedAt` string, date-time, nullable
      - `secretCreatedAt` string, date-time, nullable
      - `secretExpiresAt` string, date-time, nullable
      - `updatedAt` string, date-time, nullable
    - `credentialRevocation` C1ApiAppV1CredentialRevocation: CredentialRevocation describes the current revoke eligibility of a credential C1 issued through credential vending.
      - `state` 'CREDENTIAL_REVOCATION_STATE_UNSPECIFIED' | 'CREDENTIAL_REVOCATION_STATE_READY' | 'CREDENTIAL_REVOCATION_STATE_REVOKING' | 'CREDENTIAL_REVOCATION_STATE_REVOKE_FAILED' | 'CREDENTIAL_REVOCATION_STATE_UNAVAILABLE' | 'CREDENTIAL_REVOCATION_STATE_REVOKED': The state field.
    - `fullKnowledgeVaultId` string, nullable: The fullKnowledgeVaultId field. This field is part of the `destination` oneof. See the documentation for `c1.api.app.v1.AppSecretResourceView` for more details.
    - `paperVaultId` string, nullable: The paperVaultId field. This field is part of the `destination` oneof. See the documentation for `c1.api.app.v1.AppSecretResourceView` for more details.
    - `resourceTypePath` string: The resourceTypePath field.
  - `nextPageToken` string: The nextPageToken field.

## Changes

- **2026-10-20** `fe943bedf41b`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/conductorone/apis/c1-api/changes/api/v1/search/app-secrets/my-vended-credentials/post.md)

---

[API](https://skmtc.dev/conductorone/apis/c1-api.md) - [All operations](https://skmtc.dev/conductorone/apis/c1-api/llms.txt) - [OpenAPI document](https://skmtc.dev/conductorone/apis/c1-api/revisions/fe943bedf41b?raw)