---
title: "List credentials"
method: GET
path: "/v1/access-control/credentials"
tags: ["credentials"]
---

# List credentials

`GET /v1/access-control/credentials`

## Request

- Base URL: `https://developer.coram.ai`
- URL: `https://developer.coram.ai/v1/access-control/credentials`
- Auth: API key in header `X-Auth-Token`

List user credentials in your organization. `card_id` and `pin` are `null` when unassigned.

## Query parameters

- `page` integer
- `limit` integer

## Response `200`

User credentials in the organization

- CredentialList
  - `results` Credential[], required
    - `id` integer, required: Stable Coram user identifier. Store this with your external user mapping.
    - `name` string, required
    - `email` string, required
    - `card_id` integer, nullable, required: Active physical card identifier, or null when unassigned.
    - `pin` string, nullable, required: Active PIN, or null when unassigned.
  - `has_more` boolean, required

## Other responses

- `400`: Invalid page or limit value
- `401`: Missing or invalid API key
- `403`: API key lacks read scope or an Access Control admin creator role
- `500`: Server error

## Changes

- **2026-10-08** `00feffc78d77`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/coram/apis/coram-api/changes/v1/access-control/credentials/get.md)

---

[API](https://skmtc.dev/coram/apis/coram-api.md) - [All operations](https://skmtc.dev/coram/apis/coram-api/llms.txt) - [OpenAPI document](https://skmtc.dev/coram/apis/coram-api/revisions/00df3cfc762f?raw)