---
title: "List project credentials (metadata only)"
method: GET
path: "/projects/v1/{project_id}/credentials"
tags: ["Projects"]
---

# List project credentials (metadata only)

`GET /projects/v1/{project_id}/credentials`

## Request

- Base URL: `https://api.run402.com`
- URL: `https://api.run402.com/projects/v1/{project_id}/credentials`
- Auth: one of:
  - API key in header `SIGN-IN-WITH-X`
  - HTTP bearer

Lists the project's credentials. Metadata ONLY — the secret is never returned from a read, and no secret hash is exposed. Pass `include_revoked=true` to include revoked rows.

## Path parameters

- `project_id` string, required

## Query parameters

- `include_revoked` boolean

## Headers

- `SIGN-IN-WITH-X` string, required

## Response `200`

Credential metadata

- object
  - `credentials` object[]
    - `credential_id` string
    - `project_id` string
    - `kind` 'anon' | 'service'
    - `name` string
    - `created_at` string, date-time
    - `last_used_at` string, date-time, nullable
    - `expires_at` string, date-time, nullable
    - `revoked_at` string, date-time, nullable
    - `revoked_reason` string, nullable
    - `replacement_of` string, nullable

## Other responses

- `403`: Not authorized on this project

---

[API](https://skmtc.dev/run402/apis/run402-api.md) · [All operations](https://skmtc.dev/run402/apis/run402-api/llms.txt) · [OpenAPI document](https://skmtc.dev/run402/apis/run402-api/revisions/893607557f50?raw)