---
title: "List credentials"
method: GET
path: "/credentials"
tags: ["credentials"]
---

# List credentials

`GET /credentials`

Lists all available credentials in a user context. Append `?workspaceId` to list credentials in a workspace context, and `?platformId` to filter credentials by computing platform.

## Query parameters

- `workspaceId` integer
- `platformId` string

## Response `200`

OK

- ListCredentialsResponse
  - `credentials` Credentials[]
    - `id` string
    - `name` string, required
    - `description` string
    - `provider` 'aws' | 'azure' | 'azure_entra' | 'google' | 'github' | 'gitlab' | 'bitbucket' | 'ssh' | 'k8s' | 'container-reg' | 'tw-agent' | 'codecommit' | 'gitea' | 'azurerepos' | 'seqeracompute' | 'azure-cloud' | 's3', required
    - `baseUrl` string
    - `category` string
    - `deleted` boolean
    - `lastUsed` string, date-time
    - `dateCreated` string, date-time
    - `lastUpdated` string, date-time
    - `keys` union
      - object
        - `discriminator` string
        - `mode` 'keys' | 'role'
        - `accessKey` string
        - `secretKey` string
        - `assumeRoleArn` string
        - `externalId` string
      - object
        - `discriminator` string
        - `data` string
      - object
        - `discriminator` string
        - `username` string
        - `password` string
        - `token` string
      - object
        - `discriminator` string
        - `username` string
        - `password` string
        - `token` string
      - object
        - `discriminator` string
        - `username` string
        - `password` string
        - `token` string
      - object
        - `discriminator` string
        - `username` string
        - `password` string
        - `token` string
      - object
        - `discriminator` string
        - `privateKey` string
        - `passphrase` string
      - object
        - `discriminator` string
        - `certificate` string
        - `privateKey` string
        - `token` string
      - object
        - `discriminator` string
        - `batchName` string
        - `storageName` string
        - `batchKey` string
        - `storageKey` string
      - object
        - `discriminator` string
        - `batchName` string
        - `storageName` string
        - `batchKey` string
        - `storageKey` string
        - `subscriptionId` string
        - `tenantId` string
        - `clientId` string
        - `clientSecret` string
      - object
        - `discriminator` string
        - `username` string
        - `password` string
        - `token` string
      - object
        - `discriminator` string
        - `userName` string
        - `password` string
        - `registry` string
      - object
        - `discriminator` string
        - `connectionId` string
        - `workDir` string
        - `shared` boolean
      - object
        - `discriminator` string
        - `username` string
        - `password` string
        - `token` string
      - object
        - `discriminator` string
        - `batchName` string
        - `storageName` string
        - `batchKey` string
        - `storageKey` string
        - `tenantId` string
        - `clientId` string
        - `clientSecret` string
      - object
        - `discriminator` string
        - `mode` 'keys' | 'role'
        - `accessKey` string
        - `secretKey` string
        - `assumeRoleArn` string
        - `externalId` string
      - object
        - `discriminator` string
        - `accessKey` string
        - `secretKey` string
        - `pathStyleAccessEnabled` boolean
      - object
        - `discriminator` string
        - `password` string

## Other responses

- `400` — Bad request
- `403` — Operation not allowed

## Changes

> 4 revisions in range; 1 not diffed.

- **2026-03-10** `49c99a6944de` — 4 info
  - added the optional property `credentials/items/keys/oneOf[subschema #16: Seqera Compute credentials]/externalId` to the response with the `200` status
  - added the optional property `credentials/items/keys/oneOf[subschema #16: Seqera Compute credentials]/mode` to the response with the `200` status
  - added the optional property `credentials/items/keys/oneOf[subschema #1: AWS credentials]/externalId` to the response with the `200` status
  - added the optional property `credentials/items/keys/oneOf[subschema #1: AWS credentials]/mode` to the response with the `200` status
- **2026-01-20** `98d6b538c88e` — 1 breaking, 1 warning, 34 info
  - added `#/components/schemas/AzureCloudKeys, #/components/schemas/S3SecurityKeys, #/components/schemas/LocalSecurityKeys` to the `credentials/items/keys` response property `oneOf` list for the response status `200`
  - added the new `s3` enum value to the `credentials/items/provider` response property for the response status `200`
  - added the optional property `credentials/items/keys/oneOf[#/components/schemas/AzureEntraKeys -> subschema #15: Azure Entra credentials]/batchName` to the response with the `200` status
  - added the optional property `credentials/items/keys/oneOf[#/components/schemas/AzureEntraKeys -> subschema #15: Azure Entra credentials]/clientId` to the response with the `200` status
  - …32 more

[Change history](https://skmtc.dev/seqeralabs/apis/seqera-api/changes/credentials/get.md)

---

[API](https://skmtc.dev/seqeralabs/apis/seqera-api.md) · [All operations](https://skmtc.dev/seqeralabs/apis/seqera-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/seqeralabs/seqera-api/revisions/49c99a6944de/schema)