---
title: "List BYOK Credentials"
method: GET
path: "/byok"
tags: ["BYOK"]
---

# List BYOK Credentials

`GET /byok`

## Request

- Base URL: `https://synchronex.ai/api/v1`
- URL: `https://synchronex.ai/api/v1/byok`
- Auth: one of:
  - HTTP bearer
  - HTTP bearer
  - OAuth 2 (authorization code, authorization URL `https://synchronex.ai/oauth/authorize`, token URL `https://synchronex.ai/api/oauth/token`, scopes: `read`)

Lists encrypted BYOK credentials without raw secret values. Requires Pro or Managed tier.

## Response `200`

Credential list.

- object
  - `credentials` ByokCredential[]
    - `id` string, uuid
    - `service` string
    - `label` string
    - `key_hint` string
    - `created_at` string, date-time
    - `last_used_at` string, date-time, nullable

## Other responses

- `401`: Unauthorized. Missing, malformed, expired, or revoked bearer token.
- `403`: Forbidden. The token scope or account tier is insufficient.
- `429`: Rate limit exceeded. Retry after the indicated reset time.
- `500`: Internal server error.

---

[API](https://skmtc.dev/synchronex/apis/synchronex-api.md) · [All operations](https://skmtc.dev/synchronex/apis/synchronex-api/llms.txt) · [OpenAPI document](https://skmtc.dev/synchronex/apis/synchronex-api/revisions/aa1e0df0a8d5?raw)
