---
title: "Get all credentials"
method: GET
path: "/v1/credentials"
tags: ["Credentials"]
---

# Get all credentials

`GET /v1/credentials`

Retrieves a paginated list of credentials for the current organization

## Query parameters

- `page` integer — Page number for pagination
- `page_size` integer — Number of items per page
- `vault_type` 'bitwarden' | 'azure_vault' | 'custom'

## Headers

- `x-api-key` string, nullable — Skyvern API key for authentication. API key can be found at https://app.skyvern.com/settings.

## Response `200`

Successful Response

- CredentialResponse[]
  - `credential_id` string, required — Unique identifier for the credential
  - `credential` union, required — The credential data
    - PasswordCredentialResponse — Response model for password credentials — non-sensitive fields only. SECURITY: Must NEVER include password or TOTP secret.
      - `username` string, required — The username associated with the credential
      - `totp_type` 'authenticator' | 'email' | 'text' | 'none' — Type of 2FA/TOTP method used.
      - `totp_identifier` string, nullable — Identifier (email or phone number) used to fetch TOTP codes
    - CreditCardCredentialResponse — Response model for credit card credentials — non-sensitive fields only. SECURITY: Must NEVER include full card number, CVV, expiration date, or card holder name.
      - `last_four` string, required — Last four digits of the credit card number
      - `brand` string, required — Brand of the credit card
    - SecretCredentialResponse — Response model for secret credentials — non-sensitive fields only. SECURITY: Must NEVER include the secret_value.
      - `secret_label` string, nullable — Optional label for the stored secret
  - `credential_type` 'password' | 'credit_card' | 'secret', required — Type of credential stored in the system.
  - `name` string, required — Name of the credential
  - `vault_type` 'bitwarden' | 'azure_vault' | 'custom'
  - `browser_profile_id` string, nullable — Browser profile ID linked to this credential
  - `tested_url` string, nullable — Login page URL used during the credential test
  - `user_context` string, nullable — User-provided context describing the login sequence (e.g., 'click SSO button first')
  - `save_browser_session_intent` boolean, nullable — Whether the user intends to save a browser session, regardless of test outcome

## Other responses

- `422` — Validation Error

## Changes

- **2026-03-30** `8a4e8b880de8` — 1 info
  - added the new optional `query` request parameter `vault_type`
- **2026-03-29** `d70a0640ef29` — 1 warning
  - deleted the `query` request parameter `vault_type`
- **2026-03-29** `8a4e8b880de8` — 1 info
  - added the new optional `query` request parameter `vault_type`
- **2026-03-26** `d70a0640ef29` — 2 info
  - added the optional property `items/save_browser_session_intent` to the response with the `200` status
  - added the optional property `items/vault_type` to the response with the `200` status
- **2026-03-26** `458f1f2bbd45` — 2 warning
  - removed the optional property `items/save_browser_session_intent` from the response with the `200` status
  - removed the optional property `items/vault_type` from the response with the `200` status

[Full history](https://skmtc.dev/skyvern-ai/apis/skyvern-api/changes/v1/credentials/get.md)

---

[API](https://skmtc.dev/skyvern-ai/apis/skyvern-api.md) · [All operations](https://skmtc.dev/skyvern-ai/apis/skyvern-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/skyvern-ai/skyvern-api/revisions/fdb894aa6708/schema)