---
title: "List agent's credentials"
method: GET
path: "/agents/{agent_id}/inbound-credentials"
tags: ["Agents"]
---

# List agent's credentials

`GET /agents/{agent_id}/inbound-credentials`

## Request

- Base URL: `https://console.jumpcloud.com/api/v2`
- URL: `https://console.jumpcloud.com/api/v2/agents/{agent_id}/inbound-credentials`
- Auth: API key in header `x-api-key`
- TypeScript: <https://skmtc.dev/jumpcloud/apis/jumpcloud-api-2/docs/agents/:agent_id/inbound-credentials/get.ts> (a function with typed inputs; its response is checked against the schema)

Retrieves a list of credentials for the agent. Credential secrets are never returned.

## Path parameters

- `agent_id` string, required

## Headers

- `x-org-id` string

## Response `200`

Credentials retrieved successfully

- AgentInboundCredentialList: An agent's inbound OAuth credential records.
  - `credentials` AgentInboundCredential[], required: Credential records for this agent.
    - `clientId` string, required: OAuth client ID for this credential.
    - `authType` 'client_credentials' | 'client_jwt_assertion', required: Client authentication method.
    - `tokenEndpointAuthMethod` 'client_secret_basic' | 'client_secret_post', required: OAuth token endpoint client authentication method for this credential. Legacy rows with a NULL stored value are returned as `client_secret_basic`.
    - `status` 'active' | 'retiring' | 'expired', required: Credential lifecycle status.
    - `createdAt` string, date-time, required
    - `updatedAt` string, date-time, required
    - `expiresAt` string, date-time, nullable, required: ISO 8601 date-time (UTC) or JSON null.

## Other responses

- `401`: Unauthenticated
- `403`: Insufficient scope
- `404`: Not Found
- `default`: Unexpected error

---

[API](https://skmtc.dev/jumpcloud/apis/jumpcloud-api-2.md) - [All operations](https://skmtc.dev/jumpcloud/apis/jumpcloud-api-2/llms.txt) - [OpenAPI document](https://skmtc.dev/jumpcloud/apis/jumpcloud-api-2/revisions/3f09fe63caaa?raw)