---
title: "List Credentials"
method: GET
path: "/password-vault/credentials"
tags: ["Password Vault"]
---

# List Credentials

`GET /password-vault/credentials`

## Request

- Base URL: `https://console.jumpcloud.com/api/v2`
- URL: `https://console.jumpcloud.com/api/v2/password-vault/credentials`
- Auth: API key in header `x-api-key`
- TypeScript: <https://skmtc.dev/jumpcloud/apis/jumpcloud-api-2/docs/password-vault/credentials/get.ts> (a function with typed inputs; its response is checked against the schema)

List password vault credentials.

## Query parameters

- `filter` string[]
- `skip` integer
- `sort` string
- `limit` integer
- `search` string

## Response `200`

A successful response.

- JumpcloudPrivilegedAccessListCredentialsReply
  - `results` JumpcloudPrivilegedAccessCredentialListItem[]
    - `accessPolicies` JumpcloudPrivilegedAccessAccessPolicies
      - `groups` JumpcloudPrivilegedAccessGroupAccess[]
        - `id` integer
        - `isResourceManager` boolean: Reply enrichment only — not persisted on upsert.
        - `name` string
        - `permissions` string[]
      - `isPrivate` boolean
      - `users` JumpcloudPrivilegedAccessUserAccess[]
        - `email` string
        - `id` integer
        - `isAdmin` boolean
        - `isUser` boolean: Reply enrichment only — not persisted on upsert.
        - `name` string
        - `permissions` string[]
    - `archived` boolean
    - `cardholderName` string: Payment Card: cardholder name shown as the list subtitle / description column.
    - `credentialType` 'UNDEFINED' | 'PASSWORD' | 'KEY' | 'CONNECTION_STRING' | 'SECURE_NOTE' | 'TWO_FA' | 'CREDIT_CARD' | 'ID_CARD' | 'IDENTITY'
    - `domain` string
    - `expirationDate` string
    - `firstName` string: Identity: first name shown as the list subtitle / description column. Secure Note and 2FA have no subtitle field (name only).
    - `folderId` string, byte
    - `folderName` string
    - `id` string, byte
    - `idType` string: ID Card: id type shown as the list subtitle / description column.
    - `isFavorite` boolean
    - `last4Digits` string
    - `lastTimeUsed` string
    - `linkedWebsiteUris` string[]: Populated only when the request sets include_linked_website_uris. Distinct website URIs linked to the credential.
    - `mfaRegistered` boolean
    - `name` string
    - `needsRotationValidation` boolean
    - `passwordStrength` integer: zxcvbn score 0–4 for Password credentials (stored as Credential.PasswordStrenght). Clients treat values < 3 as weak (same threshold as dashboard WeakCredentials).
    - `permissions` string[]
    - `rotationEnabled` boolean
    - `tags` string
    - `username` string
  - `totalCount` integer

---

[API](https://skmtc.dev/jumpcloud/apis/jumpcloud-api-2.md) - [All operations](https://skmtc.dev/jumpcloud/apis/jumpcloud-api-2/llms.txt) - [OpenAPI document](https://skmtc.dev/jumpcloud/apis/jumpcloud-api-2/revisions/3f09fe63caaa?raw)