---
title: "Every MCP credential on this account"
method: GET
path: "/credentials"
tags: ["Account"]
---

# Every MCP credential on this account

`GET /credentials`

## Request

- Base URL: `https://api.imprezahost.com/v1`
- URL: `https://api.imprezahost.com/v1/credentials`
- Auth: API key in header `X-API-Key` and API key in header `X-API-Secret`

What each credential may do, what it may touch, its daily budget and
what is left of it, when it was last used, and which credential
minted it. The token itself is never returned — not here and not
anywhere. Since 25 September 2026 it also reports the monthly budget and
its remainder, per-credential resource quotas, and the human user
answerable for the credential (`owner`).

`state` separates a revoked credential from an expired one: both are
dead, and a caller deciding what to clean up wants them told apart.

## Response `200`

The credentials

---

[API](https://skmtc.dev/imprezahost/apis/impreza-host-public-api.md) · [All operations](https://skmtc.dev/imprezahost/apis/impreza-host-public-api/llms.txt) · [OpenAPI document](https://skmtc.dev/imprezahost/apis/impreza-host-public-api/revisions/db86511f604f?raw)