---
title: "List upstream API credentials — labels and API bindings only, no secret values"
method: GET
path: "/credentials"
tags: ["credentials"]
---

# List upstream API credentials — labels and API bindings only, no secret values

`GET /credentials`

List stored upstream API credentials. Values are never returned.

All authenticated callers (agent keys and human sessions) can see all credential
labels and IDs — this is intentional. Labels are not secrets, and agents need
to discover credential IDs in order to file targeted `grant` access requests
(e.g. "bind Work Gmail" vs "bind Personal Gmail").

Use `GET /credentials/{id}` to retrieve a specific credential by ID.
Filter with `?api_id=api.github.com` to list all credentials for a given API.

## Query parameters

- `api_id` string, nullable — Filter credentials by API ID (hostname)

## Response `200`

Successful Response

- CredentialOut[]
  - `id` string, required
  - `label` string, required
  - `identity` string, nullable
  - `api_id` string, nullable
  - `auth_type` string, nullable
  - `server_variables` object, nullable
  - `scheme` object, nullable
  - `routes` string[], nullable
  - `created_at` number, nullable
  - `updated_at` number, nullable
  - `account_id` string, nullable
  - `app_slug` string, nullable
  - `synced_at` number, nullable

## Other responses

- `422` — Validation Error

## Changes

- **2026-04-14** `bd463fcefb14` — 3 info
  - added the optional property `items/routes` to the response with the `200` status
  - added the optional property `items/scheme` to the response with the `200` status
  - added the optional property `items/server_variables` to the response with the `200` status
- **2026-04-13** `76e8f6063728` — 7 breaking, 10 warning, 12 info
  - the response's body type/format changed from `object`/`` to `array`/`` for status `200`
  - media type `application/problem+json` was changed to a more general media type `application/json` for the response status `422`
  - the response property `detail` became optional for the status `422`
  - the `detail` response property's maxLength was unset from `4096` for the response status `422`
  - …25 more

[Change history](https://skmtc.dev/jentic/apis/jentic-control-plane-api/changes/credentials/get.md)

---

[API](https://skmtc.dev/jentic/apis/jentic-control-plane-api.md) · [All operations](https://skmtc.dev/jentic/apis/jentic-control-plane-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/jentic/jentic-control-plane-api/revisions/bd463fcefb14/schema)