---
title: "Read calling credential identity"
method: GET
path: "/api/v1/credential"
tags: ["canonical"]
---

# Read calling credential identity

`GET /api/v1/credential`

## Request

- Base URL: `https://app.graypass.org` (the document declares no server; this is the origin it was published from)
- URL: `https://app.graypass.org/api/v1/credential`
- Auth: HTTP bearer

Resolve the calling credential’s tenant, environment, authority and proof issuer for trusted backend configuration.

## Response `200`

Credential id, tenant, environment, key mode, authority and configured proof issuer.

- CredentialIdentity: Non-secret identity and scope of the authenticated server credential, used to establish trusted verification expectations.
  - `credential` string, required: Public identifier of the calling credential.
  - `environment` string, required: Environment identifier that scopes this record; sandbox and live resources are separate.
  - `environment_kind` 'sandbox' | 'live', required: Environment category: sandbox or live.
  - `mode` 'test' | 'live', required: Credential key mode, test or live; distinct from an action’s test, shadow or enforce mode.
  - `proof_issuer` string, required: Expected proof issuer reported by the trusted configured service; never learn an issuer from an unverified proof.
  - `scope` 'client' | 'server' | 'admin', required: Credential authority category. Canonical backend routes require server or admin; client scope is insufficient.
  - `tenant` string, required: Tenant identifier to bind proof verification to the intended customer.

---

[API](https://skmtc.dev/graypass/apis/graypass-api.md) - [All operations](https://skmtc.dev/graypass/apis/graypass-api/llms.txt) - [OpenAPI document](https://skmtc.dev/graypass/apis/graypass-api/revisions/5f9ab64fdfdb?raw)