---
title: "Get an API Credential"
method: GET
path: "/v1/organizations/{organizationId}/api-credentials/{apiCredentialId}"
tags: ["apiCredentials"]
---

# Get an API Credential

`GET /v1/organizations/{organizationId}/api-credentials/{apiCredentialId}`

Get the specified API Credential.

## Path parameters

- `organizationId` string, required
- `apiCredentialId` string, required

## Response `200`

API Credential retrieved

- ApiCredentialResponseSchema
  - `name` string, required — Human-readable name of the API Credential.
  - `description` string, required — Brief description of the purpose and usage for the API Credential.
  - `enabled` boolean, required — If <code>true</code>, the API Credential is enabled. Otherwise, <code>false</code>.
  - `organizationId` string, required — Unique ID of the Organization.
  - `clientId` string, required — Client ID for the API Credential.
  - `roles` ApiCredentialRolesSchema, required
    - `organizationRole` 'owner' | 'admin' | 'user', required — Organization-level Role assigned to the API Credential.
    - `workspaces` WorkspaceRoleSchema[] — Workspace-level Roles assigned to the API Credential.
      - `workspaceId` string, required — Unique ID of the Workspace.
      - `workspaceRole` 'owner' | 'admin' | 'user' | 'noaccess', required — Role assigned to the API Credential on the Workspace.
      - `products` ProductRoleSchema[] — Product-level Roles assigned to the API Credential for the Workspace.
        - `product` 'edge' | 'search' | 'stream' | 'lake' | 'insights', required — Product name.
        - `role` 'admin' | 'editor' | 'reader' | 'user' | 'noaccess', required — Role assigned to the API Credential on the product.
  - `ipAllowlist` string[], required — CIDR range enforced as the IP allowlist for the API Credential. An empty array means that the API Credential has no IP restrictions.
  - `createdBy` string, required — Member who created the API Credential.
  - `createdDate` string, date-time, required — ISO 8601 timestamp when the API Credential was created.
  - `lastUpdatedBy` string, required — Member who last updated the API Credential.
  - `lastUpdatedDate` string, date-time, required — ISO 8601 timestamp when the API Credential was last updated.

## Other responses

- `404` — API Credential not found
- `default` — Default error response

## Changes

- **2026-08-12** `6129323514c1` — 1 warning
  - added the new `insights` enum value to the `roles/allOf[#/components/schemas/ApiCredentialRolesSchema]/workspaces/items/products/items/product/allOf[#/components/schemas/ProductName]/` response property for the response status `200`
- **2026-04-22** `53d0b0012c3a` — 1 info
  - added the required property `ipAllowlist` to the response with the `200` status
- **2026-03-18** `aecdd0a7e96c` — 1 info
  - added the non-success response with the status `404`
- **2026-03-12** `da33e1b4a433` — 1 breaking
  - removed the required property `clientSecret` from the response with the `200` status
- **2026-03-04** `bfa460b2aec3` — 1 info
  - the `name` response's property pattern `^[A-Za-z0-9-]+$` was added for the status `200`

[Full history](https://skmtc.dev/criblio/apis/cribl-cloud-public-api/changes/v1/organizations/:organizationId/api-credentials/:apiCredentialId/get.md)

---

[API](https://skmtc.dev/criblio/apis/cribl-cloud-public-api.md) · [All operations](https://skmtc.dev/criblio/apis/cribl-cloud-public-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/criblio/cribl-cloud-public-api/revisions/3fc9757c4c89/schema)