---
title: "List Credentials"
method: GET
path: "/credentials"
tags: ["credentials"]
---

# List Credentials

`GET /credentials`

Every credential held for this organization — the encrypted ones and the
1Password/inline ones not yet migrated. Identity and health only, no secret.

## Response `200`

Successful Response

- CredentialListResponse — Every credential held for an organization, in the store or not yet.
  - `credentials` CredentialSummary[]
    - `id` string, nullable — Null for a credential not yet in the store
    - `organization_id` string, required
    - `system` string, required
    - `account_key` string, required
    - `label` string, nullable
    - `username` string, nullable
    - `login_url` string, nullable
    - `field_names` string[] — Which secrets are held
    - `storage` 'encrypted' | 'onepassword' | 'legacy_plaintext'
    - `managed_by` string — 'customer' or 'noso_ops'
    - `status` string
    - `created_by` string, nullable
    - `created_at` string, date-time, nullable
    - `last_rotated_at` string, date-time, nullable
    - `last_used_at` string, date-time, nullable — Last successful unwrap by Pilot

## Other responses

- `404` — Not found

## Changes

- **2026-09-09** `a786fa3c27df` — 1 info
  - endpoint added

[Change history](https://skmtc.dev/noso/apis/crucible-backend-api/changes/credentials/get.md)

---

[API](https://skmtc.dev/noso/apis/crucible-backend-api.md) · [All operations](https://skmtc.dev/noso/apis/crucible-backend-api/llms.txt) · [OpenAPI document](https://skmtc.dev/noso/apis/crucible-backend-api/revisions/db50150bcca5?raw)