---
title: "Get datasource instance credential status"
method: GET
path: "/rest/api/v1/datasource/{datasourceInstanceId}/credentialstatus"
tags: ["Datasources"]
---

# Get datasource instance credential status

`GET /rest/api/v1/datasource/{datasourceInstanceId}/credentialstatus`

Returns the current credential status for a datasource instance. Access is limited to callers with the ADMIN scope; the handler enforces this check.

## Path parameters

- `datasourceInstanceId` string, required

## Response `200`

OK

- DatasourceCredentialStatusResponse — Status of the credentials currently installed for a datasource instance.
  - `status` 'VALID' | 'VALID_WITH_WARNINGS' | 'VALIDATING' | 'INVALID' | 'MISSING', required — Lifecycle state of the credentials installed for a datasource instance. Mirrors the internal admin Status enum so the handler can surface the same health signals already tracked today. EXPIRING_SOON is represented as VALID_WITH_WARNINGS (with detail in `message`); EXPIRED is surfaced as INVALID plus a non-null `expiresAt` in the past.
  - `lastRotatedAt` string, date-time — When the credentials were last rotated. Omitted when not known.
  - `expiresAt` string, date-time — When the active credentials expire. Omitted when not known or not applicable to this credential type.
  - `message` string — Optional human-readable detail about the current credential status.

## Other responses

- `400` — Invalid request
- `401` — Not authorized
- `403` — Forbidden
- `404` — Datasource instance not found

## Changes

- **2026-06-21** `b162fb37b3ad` — 1 info
  - the endpoint scheme security `APIToken` was removed from the API
- **2026-06-20** `d1f1d35ae0f9` — 1 info
  - the endpoint scheme security `APIToken` was added to the API
- **2026-06-19** `f00aa572acd3` — 1 info
  - the endpoint scheme security `APIToken` was removed from the API
- **2026-06-07** `ab886c377360` — 1 info
  - the endpoint scheme security `APIToken` was added to the API
- **2026-06-06** `c1a150309e52` — 1 info
  - the endpoint scheme security `APIToken` was removed from the API

[Full history](https://skmtc.dev/gleanwork/apis/glean-api/changes/rest/api/v1/datasource/:datasourceInstanceId/credentialstatus/get.md)

---

[API](https://skmtc.dev/gleanwork/apis/glean-api.md) · [All operations](https://skmtc.dev/gleanwork/apis/glean-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/gleanwork/glean-api/revisions/b162fb37b3ad/schema)