---
title: "List API credentials"
method: GET
path: "/v1/credentials"
---

# List API credentials

`GET /v1/credentials`

## Request

- Base URL: `https://docs.greatwait.dev` (the document declares no server; this is the origin it was published from)
- URL: `https://docs.greatwait.dev/v1/credentials`
- Auth: one of:
  - HTTP bearer
  - HTTP bearer and API key in header `Greatwait-Environment` and API key in header `Greatwait-Project`

Lists the credentials issued for the caller's own project and environment, oldest first, one page at a time. The authority tuple comes from the verified principal, so there is no parameter that could name another project — a listing is the caller's own book or nothing. Revoked and rotated credentials stay in the listing and carry the fields that say so; a credential nobody can see is a credential nobody can audit. `limit` is bounded by the contract and `cursor` is the opaque value the previous page returned. No page carries a secret: the item is the read shape, which has no field one could be put in.

## Query parameters

- `cursor` string
- `limit` integer

## Response `200`

List API credentials

- object
  - `data` object[], required
    - `createdAt` string, required
    - `displayPrefix` string, required
    - `environmentKind` 'test' | 'live', required
    - `expiresAt` string
    - `id` string, required
    - `issuedBy` string
    - `lastUsedAt` string
    - `project` string, required
    - `revokedAt` string
    - `supersededBy` string
    - `scopes` string[], required
  - `freshness` union, required
    - object
      - `kind` 'authoritative', required
    - object
      - `asOf` string, required
      - `kind` 'projected', required
      - `lagSeconds` integer, required
  - `nextCursor` string

## Other responses

- `400`: Problem document. Possible codes at this status: invalid_request.
- `401`: Problem document. Possible codes at this status: authentication_required, credential_expired, credential_revoked.
- `403`: Problem document. Possible codes at this status: scope_missing.
- `409`: Problem document. Possible codes at this status: project_archived.
- `429`: Problem document. Possible codes at this status: rate_limited.
- `503`: Problem document. Possible codes at this status: capability_not_configured, service_unavailable.

---

[API](https://skmtc.dev/greatwait/apis/greatwait-v1.md) · [All operations](https://skmtc.dev/greatwait/apis/greatwait-v1/llms.txt) · [OpenAPI document](https://skmtc.dev/greatwait/apis/greatwait-v1/revisions/6855bce23e72?raw)