---
title: "GET /developer-apps/{app_id}/credentials"
method: GET
path: "/developer-apps/{app_id}/credentials"
tags: ["Control plane"]
---

# GET /developer-apps/{app_id}/credentials

`GET /developer-apps/{app_id}/credentials`

## Request

- Base URL: `https://api.team0.ai/v1`
- URL: `https://api.team0.ai/v1/developer-apps/{app_id}/credentials`
- Auth: one of:
  - OAuth 2 (authorization code, authorization URL `https://clerk.team0.ai/oauth/authorize`, token URL `https://clerk.team0.ai/oauth/token`)
  - HTTP bearer

## Response `200`

Credential hints and lifecycle metadata; never raw secrets.

- CredentialList
  - `data` Credential[], required
    - `id` string, required
    - `object` 'api_credential', required
    - `name` string, required
    - `hint` string, required
    - `scopes` string[], required
    - `status` 'active' | 'expiring' | 'revoked' | 'expired', required
    - `expires_at` string, date-time, required
    - `version` integer, required

## Other responses

- `default`: RFC 9457 problem response. Cross-tenant identity is non-enumerating.

---

[API](https://skmtc.dev/team0/apis/team0-external-api.md) · [All operations](https://skmtc.dev/team0/apis/team0-external-api/llms.txt) · [OpenAPI document](https://skmtc.dev/team0/apis/team0-external-api/revisions/9b838d20a98f?raw)