---
title: "Changes to Create credentials"
method: POST
path: "/credentials"
---

# Changes to Create credentials

`POST /credentials`

> Every recorded change to this operation, newest first.
> 19 revisions in range; 1 not diffed.

## Timeline

Changed in 6 of 19 revisions.

- **2026-09-28** `24f327d93421`: 1 info
- **2026-08-27** `97f7655d105a`: 13 info
- **2026-08-25** `f1b3206690c9`: 2 info
- **2026-04-20** `b2b5cc41d473`: 6 info
- **2026-03-10** `49c99a6944de`: 5 info
- **2026-01-20** `98d6b538c88e`: 2 warning, 34 info

## Changes

- **2026-09-28** `24f327d93421`: 1 info
  - the request optional property `credentials/keys/oneOf[subschema #3: GitHub credentials]/token` became write-only
- **2026-08-27** `97f7655d105a`: 13 info
  - the request property `credentials/baseUrl` became nullable
  - the request property `credentials/category` became nullable
  - the request property `credentials/deleted` became nullable
  - the request property `credentials/description` became nullable
  - the request property `credentials/keys/oneOf[subschema #17: Seqera Compute credentials]/accessKey` became nullable
  - the request property `credentials/keys/oneOf[subschema #17: Seqera Compute credentials]/assumeRoleArn` became nullable
  - the request property `credentials/keys/oneOf[subschema #17: Seqera Compute credentials]/externalId` became nullable
  - the request property `credentials/keys/oneOf[subschema #1: AWS credentials]/accessKey` became nullable
  - the request property `credentials/keys/oneOf[subschema #1: AWS credentials]/assumeRoleArn` became nullable
  - the request property `credentials/keys/oneOf[subschema #1: AWS credentials]/externalId` became nullable
  - the request property `credentials/lastUsed` became nullable
  - the request property `credentials/lastValidated` became nullable
  - the request property `credentials/message` became nullable
- **2026-08-25** `f1b3206690c9`: 2 info
  - added the new `workloadIdentity` enum value to the request property `credentials/keys/oneOf[subschema #17: Seqera Compute credentials]/mode`
  - added the new `workloadIdentity` enum value to the request property `credentials/keys/oneOf[subschema #1: AWS credentials]/mode`
- **2026-04-20** `b2b5cc41d473`: 6 info
  - added the new optional request property `credentials/keys/oneOf[subschema #2: Google credentials]/serviceAccountEmail`
  - added the new optional request property `credentials/keys/oneOf[subschema #2: Google credentials]/tokenAudience`
  - added the new optional request property `credentials/keys/oneOf[subschema #2: Google credentials]/workloadIdentityProvider`
  - added `github_app` discriminator mapping keys to the `credentials/keys` request property
  - added the new `github_app` enum value to the request property `credentials/provider`
  - added `#/components/schemas/GitHubAppSecurityKeys` to the `credentials/keys` request property `oneOf` list
- **2026-03-10** `49c99a6944de`: 5 info
  - added the new optional `query` request parameter `useExternalId`
  - added the new optional request property `credentials/keys/oneOf[subschema #16: Seqera Compute credentials]/externalId`
  - added the new optional request property `credentials/keys/oneOf[subschema #16: Seqera Compute credentials]/mode`
  - added the new optional request property `credentials/keys/oneOf[subschema #1: AWS credentials]/externalId`
  - added the new optional request property `credentials/keys/oneOf[subschema #1: AWS credentials]/mode`
- **2026-01-20** `98d6b538c88e`: 2 warning, 34 info
  - removed `#/components/schemas/AwsSecurityKeys, subschema #2` from the `credentials/keys/oneOf[#/components/schemas/SeqeraComputeSecurityKeys -> subschema #16: Seqera Compute credentials]/` request property `allOf` list
  - removed `#/components/schemas/AzureSecurityKeys, subschema #2` from the `credentials/keys/oneOf[#/components/schemas/AzureEntraKeys -> subschema #15: Azure Entra credentials]/` request property `allOf` list
  - added the new optional request property `credentials/keys/oneOf[#/components/schemas/AzureEntraKeys -> subschema #15: Azure Entra credentials]/batchKey`
  - added the new optional request property `credentials/keys/oneOf[#/components/schemas/AzureEntraKeys -> subschema #15: Azure Entra credentials]/batchName`
  - added the new optional request property `credentials/keys/oneOf[#/components/schemas/AzureEntraKeys -> subschema #15: Azure Entra credentials]/clientId`
  - added the new optional request property `credentials/keys/oneOf[#/components/schemas/AzureEntraKeys -> subschema #15: Azure Entra credentials]/clientSecret`
  - added the new optional request property `credentials/keys/oneOf[#/components/schemas/AzureEntraKeys -> subschema #15: Azure Entra credentials]/discriminator`
  - added the new optional request property `credentials/keys/oneOf[#/components/schemas/AzureEntraKeys -> subschema #15: Azure Entra credentials]/storageKey`
  - added the new optional request property `credentials/keys/oneOf[#/components/schemas/AzureEntraKeys -> subschema #15: Azure Entra credentials]/storageName`
  - added the new optional request property `credentials/keys/oneOf[#/components/schemas/AzureEntraKeys -> subschema #15: Azure Entra credentials]/tenantId`
  - added the new optional request property `credentials/keys/oneOf[#/components/schemas/AzureReposSecurityKeys -> subschema #11: Azure Repos credentials]/token`
  - added the new optional request property `credentials/keys/oneOf[#/components/schemas/BitBucketSecurityKeys -> subschema #5: BitBucket credentials]/token`
  - added the new optional request property `credentials/keys/oneOf[#/components/schemas/CodeCommitSecurityKeys -> subschema #14: AWS CodeCommit credentials]/token`
  - added the new optional request property `credentials/keys/oneOf[#/components/schemas/GitHubSecurityKeys -> subschema #3: GitHub credentials]/token`
  - added the new optional request property `credentials/keys/oneOf[#/components/schemas/GiteaSecurityKeys -> subschema #6: Gitea credentials]/token`
  - added the new optional request property `credentials/keys/oneOf[#/components/schemas/SeqeraComputeSecurityKeys -> subschema #16: Seqera Compute credentials]/accessKey`
  - added the new optional request property `credentials/keys/oneOf[#/components/schemas/SeqeraComputeSecurityKeys -> subschema #16: Seqera Compute credentials]/assumeRoleArn`
  - added the new optional request property `credentials/keys/oneOf[#/components/schemas/SeqeraComputeSecurityKeys -> subschema #16: Seqera Compute credentials]/discriminator`
  - added the new optional request property `credentials/keys/oneOf[#/components/schemas/SeqeraComputeSecurityKeys -> subschema #16: Seqera Compute credentials]/secretKey`
  - the request optional property `credentials/keys/discriminator` became not read-only
  - the request optional property `credentials/keys/oneOf[#/components/schemas/AgentSecurityKeys -> subschema #13: Tower Agent credentials]/discriminator` became not read-only
  - the request optional property `credentials/keys/oneOf[#/components/schemas/AwsSecurityKeys -> subschema #1: AWS credentials]/discriminator` became not read-only
  - the request optional property `credentials/keys/oneOf[#/components/schemas/AzureReposSecurityKeys -> subschema #11: Azure Repos credentials]/discriminator` became not read-only
  - the request optional property `credentials/keys/oneOf[#/components/schemas/AzureSecurityKeys -> subschema #9: Azure credentials]/discriminator` became not read-only
  - the request optional property `credentials/keys/oneOf[#/components/schemas/BitBucketSecurityKeys -> subschema #5: BitBucket credentials]/discriminator` became not read-only
  - the request optional property `credentials/keys/oneOf[#/components/schemas/CodeCommitSecurityKeys -> subschema #14: AWS CodeCommit credentials]/discriminator` became not read-only
  - the request optional property `credentials/keys/oneOf[#/components/schemas/ContainerRegistryKeys -> subschema #12: Container registry credentials]/discriminator` became not read-only
  - the request optional property `credentials/keys/oneOf[#/components/schemas/GitHubSecurityKeys -> subschema #3: GitHub credentials]/discriminator` became not read-only
  - the request optional property `credentials/keys/oneOf[#/components/schemas/GitLabSecurityKeys -> subschema #4: GitLab credentials]/discriminator` became not read-only
  - the request optional property `credentials/keys/oneOf[#/components/schemas/GiteaSecurityKeys -> subschema #6: Gitea credentials]/discriminator` became not read-only
  - the request optional property `credentials/keys/oneOf[#/components/schemas/GoogleSecurityKeys -> subschema #2: Google credentials]/discriminator` became not read-only
  - the request optional property `credentials/keys/oneOf[#/components/schemas/K8sSecurityKeys -> subschema #8: Kubernetes credentials]/discriminator` became not read-only
  - the request optional property `credentials/keys/oneOf[#/components/schemas/SSHSecurityKeys -> subschema #7: SSH credentials]/discriminator` became not read-only
  - added `s3, azure-cloud, local` discriminator mapping keys to the `credentials/keys` request property
  - added the new `s3` enum value to the request property `credentials/provider`
  - added `#/components/schemas/AzureCloudKeys, #/components/schemas/S3SecurityKeys, #/components/schemas/LocalSecurityKeys` to the `credentials/keys` request property `oneOf` list

---

[Operation](https://skmtc.dev/seqeralabs/apis/seqera-api/docs/credentials/post.md) - [API](https://skmtc.dev/seqeralabs/apis/seqera-api.md) - [Page](https://skmtc.dev/seqeralabs/apis/seqera-api/changes/credentials/post)