Sign in
credentials

List upstream API credentials — labels and API bindings only, no secret values

List stored upstream API credentials. Values are never returned.

All authenticated callers (agent keys and human sessions) can see all credential labels and IDs — this is intentional. Labels are not secrets, and agents need to discover credential IDs in order to file targeted grant access requests (e.g. "bind Work Gmail" vs "bind Personal Gmail").

Use GET /credentials/{id} to retrieve a specific credential by ID. Filter with ?api_id=api.github.com to list all credentials for a given API.

get/credentials

Query parameters

api_idstring nullable

Filter credentials by API ID (hostname)

Filter credentials by API ID (hostname)

Response

Successful Response

idstring required

Credential ID

labelstring required

Human-readable label for this credential

identitystring nullable

Identity field (username, client ID, etc.) for basic auth or compound API key schemes

api_idstring nullable

API this credential is bound to

auth_typestring nullable

Auth type: bearer, basic, or apiKey

created_atnumber nullable

Unix timestamp when created

updated_atnumber nullable

Unix timestamp of last update

account_idstring nullable

OAuth broker account ID (if from OAuth broker)

app_slugstring nullable

OAuth app slug (if from OAuth broker)

synced_atnumber nullable

Unix timestamp of last OAuth sync

Example response

[
  {
    "id": "cred_abc123xyz",
    "label": "GitHub PAT for jentic-mini",
    "identity": "alice",
    "api_id": "api.github.com",
    "auth_type": "bearer",
    "created_at": 1672531200,
    "updated_at": 1672531200,
    "account_id": "oauth_abc123",
    "app_slug": "pipedream",
    "synced_at": 1672531200
  }
]

Changes